Skip to content

IrisQL available in the Iris Investigate API

← All updates ·

Added

You can now send IrisQL queries to the Iris Investigate API:

  • Logical operators: Combine conditions with AND, OR, and NOT to express complex search logic in a single query.
  • Field-level filters: Target specific domain attributes — registration data, infrastructure, risk scores, and more — using named field syntax.
  • Shareable queries: IrisQL is plain text. Queries pass directly in API calls, paste into tickets, and reproduce consistently across tools and sessions.
  • UI and MCP parity: The same queries that run in Advanced Search and the irisql MCP tool work unmodified against the API endpoint.

All IrisQL queries must begin with the version comment # IrisQL-1.0.

Documentation

Categories: Iris, Iris Investigate, Iris API