{
  "opencollection": "1.0.0",
  "info": {
    "name": "GreyNoise Callback GNQL API",
    "version": "3.0.0"
  },
  "request": {
    "auth": {
      "type": "apikey",
      "key": "key",
      "value": "{{key}}",
      "placement": "header"
    }
  },
  "items": [
    {
      "info": {
        "name": "GNQL",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "GNQL V3 Query",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.greynoise.io/v3/gnql",
            "params": [
              {
                "name": "query",
                "value": "tags:Mirai",
                "type": "query",
                "description": "GNQL query string"
              },
              {
                "name": "size",
                "value": "",
                "type": "query",
                "description": "The number of results provided per page for paginating through all results of a query"
              },
              {
                "name": "scroll",
                "value": "",
                "type": "query",
                "description": "Scroll token to paginate through results. Incompatible with `format=csv`."
              },
              {
                "name": "quick",
                "value": "",
                "type": "query",
                "description": "If true, the response will only include the IP address and the classification or trust level."
              },
              {
                "name": "format",
                "value": "",
                "type": "query",
                "description": "Specifies the desired format of the results. Must be either csv or json."
              },
              {
                "name": "exclude",
                "value": "",
                "type": "query",
                "description": "Comma-separated list of fields to exclude from the response.\nRecognized top-level response fields (e.g. `tags`, `cves`, `vpn`, `tor`, `raw_data`, `metadata`),\n`metadata.<subfield>` paths (e.g. `metadata.organization`, `metadata.source_country`,\n`metadata.destination_countries`), and `raw_data.<subfield>` paths (e.g. `raw_data.ja3`,\n`raw_data.http.useragent`) are accepted. The special value `tags.details` preserves tag\nidentity (id, slug) and strips only the enriched details. Unknown field names return 400.\n"
              }
            ]
          },
          "docs": "GreyNoise Query Language\nGNQL (GreyNoise Query Language) is a domain-specific query language\nthat uses Lucene deep under the hood. GNQL aims to enable GreyNoise\nEnterprise and Research users to make complex and one-off queries\nagainst the GreyNoise dataset as new business cases arise. GNQL is\nbuilt with self-defeat and fully featured product lines in mind. If\nwe do our job correctly, each individual GNQL query that brings our\nusers and customers sufficient value will eventually be transitioned\ni"
        },
        {
          "info": {
            "name": "GNQL V3 Metadata Query",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.greynoise.io/v3/gnql/metadata",
            "params": [
              {
                "name": "query",
                "value": "tags:Mirai",
                "type": "query",
                "description": "GNQL query string"
              },
              {
                "name": "size",
                "value": "",
                "type": "query",
                "description": "The number of results provided per page for paginating through all results of a query"
              },
              {
                "name": "scroll",
                "value": "",
                "type": "query",
                "description": "Scroll token to paginate through results"
              },
              {
                "name": "quick",
                "value": "",
                "type": "query",
                "description": "If true, the response will only include the IP address and the classification or trust level."
              },
              {
                "name": "exclude",
                "value": "",
                "type": "query",
                "description": "Comma-separated list of additional fields to exclude from the response.\n`raw_data` is always excluded by this endpoint; specifying it is redundant.\nRecognized top-level response fields (e.g. `tags`, `cves`, `vpn`, `tor`, `metadata`)\nand `metadata.<subfield>` paths (e.g. `metadata.organization`, `metadata.source_country`,\n`metadata.destination_countries`) are accepted. The special value `tags.details`\npreserves tag identity (id, slug) and strips only the enriched details. Unknown\nfield names return 400.\n"
              }
            ]
          },
          "docs": "GreyNoise Query Language Metadata Endpoint\nThis endpoint provides the same functionality as the main GNQL endpoint\nbut with additional field filtering capabilities. It automatically excludes\nraw data from responses and allows you to specify additional fields to exclude.\n\nThe metadata endpoint is designed for use cases where you need to retrieve\nIP intelligence data without the raw scan data, making it more efficient\nfor metadata-focused queries.\n\n_License: The `business_service_intelligence` res"
        },
        {
          "info": {
            "name": "GNQL V3 Stats",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.greynoise.io/v3/gnql/stats",
            "params": [
              {
                "name": "query",
                "value": "tags:Mirai",
                "type": "query",
                "description": "GNQL query string"
              },
              {
                "name": "count",
                "value": "",
                "type": "query",
                "description": "Number of top aggregates to grab"
              }
            ]
          },
          "docs": "Get aggregate statistics for the top organizations, actors, tags,\nASNs, countries, classifications, and operating systems of all the\nresults of a given GNQL query.\n"
        }
      ]
    }
  ],
  "bundled": true
}