GNQL V3 Metadata Query

GreyNoise Query Language Metadata Endpoint
This endpoint provides the same functionality as the main GNQL endpoint
but with additional field filtering capabilities. It automatically excludes
raw data from responses and allows you to specify additional fields to exclude.

The metadata endpoint is designed for use cases where you need to retrieve
IP intelligence data without the raw scan data, making it more efficient
for metadata-focused queries.

License: The business_service_intelligence response field
requires the BSI Module. Without it, every result returns an empty
business_service_intelligence object; all other fields are
returned normally.

Query Params
string
required

GNQL query string

integer
1 to 10000
Defaults to 10000

The number of results provided per page for paginating through all results of a query

string

Scroll token to paginate through results

boolean
Defaults to false

If true, the response will only include the IP address and the classification or trust level.

string

Comma-separated list of additional fields to exclude from the response.
raw_data is always excluded by this endpoint; specifying it is redundant.
Recognized top-level response fields (e.g. tags, cves, vpn, tor, metadata)
and metadata.<subfield> paths (e.g. metadata.organization, metadata.source_country,
metadata.destination_countries) are accepted. The special value tags.details
preserves tag identity (id, slug) and strips only the enriched details. Unknown
field names return 400.

Responses

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json