# SiteCheck Web Intel SNMP Exposure Check

> SiteCheck Web Intel SNMP Exposure Check is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

Reports whether Shodan's passive scan data shows UDP port 161 (SNMP) open on a given IPv4 address

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/snmp-exposure?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-snmp-exposure-check-b8bbe6fb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rOYpZIsKSTr0iy-NKL5rL

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-snmp-exposure-check-b8bbe6fb
```

Example prompt: Can you check whether SNMP (port 161) appears to be exposed on the IP 203.0.113.42 using Shodan's passive scan data?

## When to prefer this

Use this endpoint when you need a quick, passive indicator of SNMP exposure on an IPv4 address without actively probing the target. Ideal for reconnaissance, security audits, or triage workflows where you want to leverage Shodan's historical scan data. Prefer this over active scanning tools when stealth or non-intrusive checking is required, or when you simply need a fast lookup. Note that results may be outdated and do not confirm current SNMP accessibility or default community string exposure.

## Known failure modes

- Invalid or non-routable IPv4 address returns an error
- Shodan has no data for the IP (no historical scan record), resulting in no exposure info
- Data may be stale if Shodan hasn't recently scanned the target IP
- IPv6 addresses are not supported
- Rate limiting or payment failures may result in request rejection

## How this service works

Reports whether Shodan's pre-collected passive scan data shows SNMP (UDP port 161) seen open on an IPv4 address. Passive and possibly old; no community string is tried, so default or public community access is not tested.

## Output

Returns whether Shodan's passively collected scan data shows UDP port 161 (SNMP) as open on the specified IPv4 address. Data is pre-collected and may not reflect the current state of the host; no active probing or community string testing is performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ip"
     ],
     "properties": {
      "ip": {
       "type": "string",
       "description": "IPv4 address such as 1.1.1.1 (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-snmp-exposure-check-b8bbe6fb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)