GNQL Metadata Query
gnql-metadata-querySearch GreyNoise data using GNQL to retrieve IP metadata, classification, and tags without raw scan details. Supports pagination, quick mode, and CSV export.
Instructions
Search GreyNoise data using GNQL, returning IP metadata without raw scan data. Lighter and faster than gnql-query.
Supports the same GNQL query syntax as gnql-query. Use this when you need IP classification, tags, and metadata but not raw scan details (ports, fingerprints, HTTP paths).
Results are paginated via the scroll token. Set quick=true to return only IP and classification/trust level.
Set format="csv" for spreadsheet-friendly CSV output (columns: ip, classification, actor, organization, source_country, tags, ports, bsi_found, bsi_name, bsi_trust_level); default "json" renders a Markdown summary. structuredContent is always the full JSON regardless of format.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| size | No | Results per page (default: 25, max: 10000) | |
| query | Yes | GNQL query string | |
| quick | No | If true, return only IP and classification/trust level | |
| format | No | Output format for the text response (default: json) | json |
| scroll | No | Pagination scroll token from a previous response |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | Yes | ||
| request_metadata | Yes |