Skip to main content
Every account is on one of two plans. New accounts start on Free, which is the product, not a trial: no card is needed. Prices are on the pricing section of the Periphery home page.

​
Free

100 searches a month across every provider, every filter except has:creds, and full app pages with screenshots, extracted text, and email addresses. Each search shows its first 10 results and the total number of matches; Plus shows them all. Credential findings show which detectors verified a secret, with a lock in place of the masked values.

​
Plus

Everything in Free, with 3,000 searches a month and every result of each search, plus the API, the MCP server for AI assistants and agents, and the has:creds filter. App pages and API responses list each credential finding, masked so you can tell which key it is. See Emails and credentials.

​
Managed service and custom terms

Some things are arranged directly rather than through a plan. Write to contact@periphery.exposed for:
  • The managed service. Periphery watches your domains, investigates matching apps, attributes them to their owners, labels them (shadow IT, legitimate, phishing, false positive), and notifies you when a new exposure appears. All attribution work is performed through this service. The console and API surface search matches but do not perform attribution.
  • Resale. No plan grants the right to use Periphery’s information in reports or services you sell to your own clients. It needs a written agreement; see acceptable use.
  • More searches than Plus includes.

​
Monthly searches

Each account has a monthly allowance: 100 searches on Free, 3,000 on Plus. The console, the API and the MCP server share it.
  • What counts: every page of results, in the console, from a GET /v1/apps?q=… search, or from the MCP server’s search_apps tool. Page 2 of the same query is a second search. A search that fails or times out still counts.
  • What doesn’t count: opening an app page (in the console, with GET /v1/apps/{hostname}, or with the MCP server’s get_app and get_app_screenshot), an empty or invalid query (from the API, a missing or blank q answers 400 query_required), a has:creds search on Free, and a search refused by a rate limit or by the monthly limit.
  • Reset: the allowance resets on the 1st of each month, UTC. Unused searches do not carry over.
Your account page shows how many searches you have used this month and when the count resets. Once the allowance is used up, the console says so and offers an upgrade on Free; the API returns 429 with monthly search limit reached.

​
Rate limits

On top of the monthly allowance, each account makes at most one request per second, shared by the console, the API and the MCP server. Each surface handles going faster in its own way:
  • Console: one search per second per account. Faster than that, the console asks you to slow down, and the refused search does not count.
  • API: one request per second per account, on both endpoints. Over it, the API returns 429 with rate limit: 1 request per second. See Limits and errors.
  • MCP server: assistants often call several tools at once, so the server queues those calls for a few seconds instead of refusing them. See MCP server.

​
Changing plans

Upgrade to Plus from your account page: the first subscription of an account starts with a 14-day free trial, card required, and you pick monthly or yearly billing at checkout. Plus unlocks as soon as the trial starts. Manage your card, invoices, billing period or cancellation from the same page with Manage billing; cancelling during the trial costs nothing, and a later cancellation takes effect at the end of the paid period. For more searches, write to contact@periphery.exposed.