Skip to main content
POST
Run a Cypher query

Authorizations

Authorization
string
header
required

A Tolmo API token, sent as Authorization: Bearer <token>. Either a user token (usr_tok.*, minted by tolmo auth login, scoped to your own permissions) or an org API token created in the Tolmo app, for CI and automation.

Path Parameters

orgSlug
string
required

Body

application/json
query
string
required
Required string length: 1 - 10000
parameters
object
intent
string

Automated and agent callers MUST set this on every query: one sentence stating the goal this query serves (what you are investigating and why), e.g. "map identities that can reach datastores". It does not change the query or its results — it is recorded on the security audit trail and APM so every query has an attributable purpose. Omit only for a one-off interactive query typed by a human.

Maximum string length: 1000

Response

Default Response

rows
object[]
required
metadata
object
required