IrisQL available in the Iris Investigate API
Added
You can now send IrisQL queries to the Iris Investigate API:
- Logical operators: Combine conditions with
AND,OR, andNOTto express complex search logic in a single query. - Field-level filters: Target specific domain attributes — registration data, infrastructure, risk scores, and more — using named field syntax.
- Shareable queries: IrisQL is plain text. Queries pass directly in API calls, paste into tickets, and reproduce consistently across tools and sessions.
- UI and MCP parity: The same queries that run in Advanced Search and the
irisqlMCP tool work unmodified against the API endpoint.
All IrisQL queries must begin with the version comment # IrisQL-1.0.
Documentation
Categories: Iris, Iris Investigate, Iris API