censys-api

Query Censys API v2 for host reconnaissance and certificate data.

15|5|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/Liberty91LTD/cti-skills --skill censys-api
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: censys-api
Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/censys-api
Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill censys-api

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides quick access to host reconnaissance and certificate data from the Censys API v2, enabling rapid profiling of exposed infrastructure and assets.

Core Features & Use Cases

  • View host details: Retrieve host-level data, including IPs, ASN, location, and operating systems.
  • Inspect certificates: Access certificate metadata to identify related infrastructure and trust relationships.
  • Common queries: Use predefined search patterns to discover hosts and services relevant to threat investigations.

Quick Start

Run a simple query against the Censys API to fetch host information for a given IP or domain.

Frequently Asked Questions about censys-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve host reconnaissance data for a specific IP address?

To retrieve host reconnaissance data, query the Censys API v2 endpoints for host lookup, which returns IP details, ASN, location, and operating system information in a structured response format.

Can I use Censys API to inspect certificate metadata for threat intelligence workflows?

Yes, you can use the Censys API to access certificate metadata, enabling you to identify related infrastructure and trust relationships for integration into threat intelligence workflows.

What do I need to authenticate queries against the Censys API v2?

You need to provide valid authentication credentials to query the Censys API v2, ensuring your requests meet the documented authentication requirements and operate within specified rate limits.

How does Censys API handle common search queries for exposed infrastructure?

The Censys API uses predefined search patterns to discover hosts and services relevant to threat investigations, allowing rapid profiling of exposed infrastructure and assets.

Are there rate limits when querying host and certificate details from Censys?

Yes, the Censys API v2 documents specific rate limits that apply to querying host and certificate details, ensuring controlled access to infrastructure attributes and reconnaissance data.

What is the best way to profile exposed assets using Censys API?

The best way to profile exposed assets is using Censys API v2 common queries to retrieve host-level data and certificate information, providing a structured response format suitable for threat intelligence.