GreyNoise API — Recall

naftiko: 1.0.0-alpha2
info:
  label: GreyNoise API — Recall
  description: 'Recall surface of GreyNoise API. 2 operations. Lead operation: GNQL V3 Recall. Self-contained Naftiko capability covering one GreyNoise business surface.'
  tags:
    - GreyNoise
    - Security
    - Recall
  created: '2026-05-30'
  modified: '2026-05-30'
binds:
  - namespace: env
    keys:
      GREYNOISE_API_KEY: GREYNOISE_API_KEY
capability:
  consumes:
    - type: http
      namespace: greynoise-recall
      baseUri: https://api.greynoise.io
      description: GreyNoise API — Recall business capability. Self-contained, no shared references.
      authentication:
        type: apikey
        key: key
        value: '{{env.GREYNOISE_API_KEY}}'
        placement: header
      resources:
        - name: v3-gnql-timeseries
          path: /v3/gnql/timeseries
          operations:
            - name: gnqlTimeSeries
              method: GET
              description: GNQL V3 Recall
              inputParameters:
                - name: query
                  in: query
                  type: string
                  required: true
                  description: GNQL query string
                - name: start
                  in: query
                  type: string
                  required: false
                  description: Start date for the desired time range
                - name: end
                  in: query
                  type: string
                  required: false
                  description: End date for the desired time range
                - name: format
                  in: query
                  type: string
                  required: false
                  description: Specifies the desired format of the results. Must be either csv or json.
                - name: limit
                  in: query
                  type: integer
                  required: false
                  description: Specifies the number of records desired from the backend query. For example, if you specify a limit of 100, you will get the first 100 records for your query, divided up by hour.
                - name: offset
                  in: query
                  type: integer
                  required: false
                  description: Specifies the offset at which to apply the limit. With limit, can be used to paginate through a large response. For example, if you specify a limit of 100 and and an offset of 200, you will get the ne
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.
        - name: v3-gnql-timeseries-stats
          path: /v3/gnql/timeseries/stats
          operations:
            - name: gnqlTimeSeriesStats
              method: GET
              description: GNQL V3 Recall Stats
              inputParameters:
                - name: query
                  in: query
                  type: string
                  required: true
                  description: GNQL query string
                - name: start
                  in: query
                  type: string
                  required: false
                  description: Start date for the desired time range
                - name: end
                  in: query
                  type: string
                  required: false
                  description: End date for the desired time range
                - name: format
                  in: query
                  type: string
                  required: false
                  description: Specifies the desired format of the results. Must be either csv or json.
                - name: interval
                  in: query
                  type: string
                  required: true
                  description: Specifies the time interval over which to aggregate unique IPs that return the given GNQL query.
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.
  exposes:
    - type: rest
      namespace: greynoise-recall-rest
      port: 8080
      description: REST adapter for GreyNoise API — Recall. One Spectral-compliant resource per consumed operation, prefixed with /v1.
      resources:
        - path: /v1/gnql/timeseries
          name: v1-gnql-timeseries
          description: REST surface for GNQL V3 Recall.
          operations:
            - method: GET
              name: gnqlTimeSeries
              description: GNQL V3 Recall
              call: greynoise-recall.gnqlTimeSeries
              with:
                query: rest.query
                start: rest.start
                end: rest.end
                format: rest.format
                limit: rest.limit
                offset: rest.offset
              outputParameters:
                - type: object
                  mapping: $.
        - path: /v1/gnql/timeseries/stats
          name: v1-gnql-timeseries-stats
          description: REST surface for GNQL V3 Recall Stats.
          operations:
            - method: GET
              name: gnqlTimeSeriesStats
              description: GNQL V3 Recall Stats
              call: greynoise-recall.gnqlTimeSeriesStats
              with:
                query: rest.query
                start: rest.start
                end: rest.end
                format: rest.format
                interval: rest.interval
              outputParameters:
                - type: object
                  mapping: $.
    - type: mcp
      namespace: greynoise-recall-mcp
      port: 9090
      transport: http
      description: MCP adapter for GreyNoise API — Recall. One tool per consumed operation, routed inline through this capability's consumes block.
      tools:
        - name: gnql-v3-recall
          description: GNQL V3 Recall
          hints:
            readOnly: true
            destructive: false
            idempotent: true
          call: greynoise-recall.gnqlTimeSeries
          with:
            query: tools.query
            start: tools.start
            end: tools.end
            format: tools.format
            limit: tools.limit
            offset: tools.offset
          outputParameters:
            - type: object
              mapping: $.
        - name: gnql-v3-recall-stats
          description: GNQL V3 Recall Stats
          hints:
            readOnly: true
            destructive: false
            idempotent: true
          call: greynoise-recall.gnqlTimeSeriesStats
          with:
            query: tools.query
            start: tools.start
            end: tools.end
            format: tools.format
            interval: tools.interval
          outputParameters:
            - type: object
              mapping: $.