Sublime Security

Sublime documentation

Welcome to the Sublime Security developer hub. You'll find comprehensive guides and documentation to help you start working with Sublime Security as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Message Query Language (MQL)

Sublime's domain-specific language purpose-built for email.

Message Query Language, or MQL, is a simple but powerful query language that makes it easy for anyone to analyze or query email messages. MQL powers the source field in Sublime YAML files.

MQL, and the Sublime Platform as a whole, is designed to be email provider agnostic and thus completely shareable and interoperable.

Today, MQL can be used to:

  • reference or extract fields from the MDMMDM - Message Data Model via Queries
  • detect a specific type of behavior (like a BEC phishing attack) via Detection rules
  • define policies needed to maintain regulatory or insurance compliance

To see examples of MQL in action, check out the Tutorials, Sublime rules, or How-to guides.

To easily run MQL, see the Quickstart, Sublime CLI, or Sublime Python.

Updated about a month ago


Message Query Language (MQL)


Sublime's domain-specific language purpose-built for email.

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.