/API TERMS
API Terms/Security & Auth/GreyNoise

GreyNoise

greynoise.io

Provides an API to query IP addresses in the GreyNoise dataset for internet scan/attack context, threat intelligence, blocklists, and business-service enrichment.

The GreyNoise API uses api key authentication; has freemium pricing; offers a free tier (Free Community tier: basic IP lookups, up to 50 searches/week, Community API access). Verified 2026-07-08 with per-field source links.

Security & Auth Verified 2026-07-08 medium confidence
Base URL
not documented null
no source
Auth
api_key
docs.greynoise.io ↗
Free tier
Free Community tier: basic IP lookups, up to 50 searches/week, Community API access
greynoise.io ↗
Pricing model
freemium
greynoise.io ↗
Pricing
Free community tier plus paid platform tiers (Standard, Advanced, Elite) requiring an intelligence module (Triage/Investigate/Hunt) and optional add-ons; paid tiers are Contact Sales
greynoise.io ↗
Rate limits
not documented null
no source
OpenAPI spec
not documented null
no source
MCP server
GreyNoise MCP Server exposes tools for IP reputation, RIOT/business-service checks, tag/vulnerability intelligence, and GNQL stats
docs.greynoise.io ↗