> ## Documentation Index
> Fetch the complete documentation index at: https://docs.periphery.exposed/llms.txt
> Use this file to discover all available pages before exploring further.

# Plans and limits

> What the Free and Plus plans include, the monthly searches each one gets, and the rate limits that apply.

Every account is on one of two plans. New accounts start on Free, which is the product, not a trial: no card is needed.

| | Free | Plus |
| - | - | - |
| Searches per month (console, API and MCP together) | 100 | 3,000 |
| Results per search | first 10 | every result, 50 per page |
| Every filter except `has:creds` | yes | yes |
| Email addresses on app pages | yes | yes |
| `has:creds` filter and masked credential values | no | yes |
| API access | no | yes |
| MCP server for AI assistants | no | yes |

Prices are on the [pricing section](https://periphery.exposed/#pricing) of the Periphery home page.

## Free

100 searches a month across every provider, every filter except `has:creds`, and full app pages with screenshots, extracted text, and email addresses. Each search shows its first 10 results and the total number of matches; Plus shows them all. Credential findings show which detectors verified a secret, with a lock in place of the masked values.

## Plus

Everything in Free, with 3,000 searches a month and every result of each search, plus the [API](https://docs.periphery.exposed/api/overview.md), the [MCP server](https://docs.periphery.exposed/mcp/overview.md) for AI assistants and agents, and the `has:creds` filter. App pages and API responses list each credential finding, masked so you can tell which key it is. See [Emails and credentials](https://docs.periphery.exposed/apps/emails-and-credentials.md).

## Managed service and custom terms

Some things are arranged directly rather than through a plan. Write to [contact@periphery.exposed](mailto:contact@periphery.exposed) for:

* **The managed service.** Periphery watches your domains, investigates matching apps, attributes them to their owners, labels them (shadow IT, legitimate, phishing, false positive), and notifies you when a new exposure appears. **All attribution work is performed through this service.** The console and API surface search matches but do not perform attribution.
* **Resale.** No plan grants the right to use Periphery's information in reports or services you sell to your own clients. It needs a written agreement; see [acceptable use](https://docs.periphery.exposed/policies/acceptable-use.md).
* **More searches** than Plus includes.

## Monthly searches

Each account has a monthly allowance: 100 searches on Free, 3,000 on Plus. The console, the API and the MCP server share it.

* **What counts:** every page of results, in the console, from a `GET /v1/apps?q=…` search, or from the MCP server's `search_apps` tool. Page 2 of the same query is a second search. A search that fails or times out still counts.
* **What doesn't count:** opening an app page (in the console, with `GET /v1/apps/{hostname}`, or with the MCP server's `get_app` and `get_app_screenshot`), an empty or invalid query (from the API, a missing or blank `q` answers `400 query_required`), a `has:creds` search on Free, and a search refused by a rate limit or by the monthly limit.
* **Reset:** the allowance resets on the 1st of each month, UTC. Unused searches do not carry over.

Your account page shows how many searches you have used this month and when the count resets. Once the allowance is used up, the console says so and offers an upgrade on Free; the API returns `429` with `monthly search limit reached`.

## Rate limits

On top of the monthly allowance, each account makes at most one request per second, shared by the console, the API and the MCP server. Each surface handles going faster in its own way:

* **Console:** one search per second per account. Faster than that, the console asks you to slow down, and the refused search does not count.
* **API:** one request per second per account, on both endpoints. Over it, the API returns `429` with `rate limit: 1 request per second`. See [Limits and errors](https://docs.periphery.exposed/api/limits-and-errors.md).
* **MCP server:** assistants often call several tools at once, so the server queues those calls for a few seconds instead of refusing them. See [MCP server](https://docs.periphery.exposed/mcp/overview.md#limits).

## Changing plans

Upgrade to Plus from your account page: the first subscription of an account starts with a 14-day free trial, card required, and you pick monthly or yearly billing at checkout. Plus unlocks as soon as the trial starts. Manage your card, invoices, billing period or cancellation from the same page with **Manage billing**; cancelling during the trial costs nothing, and a later cancellation takes effect at the end of the paid period. For more searches, write to [contact@periphery.exposed](mailto:contact@periphery.exposed).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.