API reference
Every endpoint of the v2 API, grouped by area. Each page lists the parameters and response fields, shows code samples, and can send read requests with your API key. Requests from the page go to https://api.urlquery.net and consume your quota. Deleting a report is not possible from the page; use your own client.
Start with the API overview for authentication, errors, pagination, and rate limits. To generate a client or import the API into a tool, download the OpenAPI description.
Submissions
- POST
- GETGet a submission
/submissions/{queue_id}Returns the progress of a submission made by you or your team.
Reports
- GETGet a report
/reports/{report_id}Returns the full report document: the overview fields plus HTTP transactions, JavaScript, detections, and extracted artifacts.
- DELETE
- GET
- GETGet a report screenshot
/reports/{report_id}/screenshotReturns the screenshot captured during the analysis.
- GETDownload a captured resource
/reports/{report_id}/resources/{hash}/contentReturns the content of a resource captured in the report, always as an application/octet-stream attachment so browsers do not render it.
- GET
- GETList related reports
/reports/relatedLists recent reports whose target (the IP address, ASN, or domain of the analyzed URL) matches value, newest first.
- GET
Reputation
- POSTLook up URL reputation
/reputation/lookupEvaluates exact URL and FQDN reputation over the last 30 days and returns the stronger verdict.
- GETExport reputation indicators
/reputation/exportStreams indicators with urlquery evidence as NDJSON: a kind=meta line, then kind=indicator lines, then a matching kind=complete line with the export ID, count, and SHA-256 digest.
Host Profile
- GET
- GETSearch host cohorts
/hosts/searchFinds hosts by observation time and incoming or outgoing relation metrics.
- GETGet a host profile
/hosts/{host}Returns an observed FQDN or IP with its IPs, technologies, certificates, value-free cookie fingerprints, response-header names, MIME types, and relation totals.
- GET
- GET
Detection
- GET
- POST
- GET
- PUT
- DELETE
- GETList the rules of a YARA rule set
/detection/yara/sets/{set_id}/rulesRules in the set that you can see, including their source.
- POSTCreate a YARA rule
/detection/yara/sets/{set_id}/rulesCompiles content and saves it in a set you own or your team shares.
- GET
- PUT
- DELETE
- POST
- POSTTest a YARA source against a report
/detection/yara/testCompiles content and scans one report you can read with it, without saving anything.