OWASP ZAP core API
The core API from OWASP ZAP — 97 operation(s) for core.
The core API from OWASP ZAP — 97 operation(s) for core.
openapi: 3.0.3
info:
title: ZAP accessControl core API
description: The HTTP API for controlling and accessing ZAP.
contact:
name: ZAP User Group
url: https://groups.google.com/group/zaproxy-users
email: zaproxy-users@googlegroups.com
license:
name: Apache 2.0
url: https://www.apache.org/licenses/LICENSE-2.0.html
version: 2.16.1
servers:
- url: http://zap
description: The URL while proxying through ZAP.
- url: http://{address}:{port}
description: The URL of a Local Proxy of ZAP.
variables:
address:
description: The address ZAP is listening on.
default: 127.0.0.1
port:
description: The port ZAP is bound to.
default: '8080'
security:
- {}
- apiKeyHeader: []
- apiKeyQuery: []
tags:
- name: core
paths:
/JSON/core/action/accessUrl/:
parameters:
- name: url
in: query
required: true
description: ''
schema:
type: string
- name: followRedirects
in: query
description: ''
schema:
type: string
get:
description: Convenient and simple action to access a URL, optionally following redirections. Returns the request sent and response received and followed redirections, if any. Other actions are available which offer more control on what is sent, like, 'sendRequest' or 'sendHarRequest'.
operationId: coreActionAccessUrl
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/addProxyChainExcludedDomain/:
parameters:
- name: value
in: query
required: true
description: ''
schema:
type: string
- name: isRegex
in: query
description: ''
schema:
type: string
- name: isEnabled
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionAddProxyChainExcludedDomain
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/clearExcludedFromProxy/:
get:
description: Clears the regexes of URLs excluded from the local proxies.
operationId: coreActionClearExcludedFromProxy
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/createSbomZip/:
parameters:
- name: filePath
in: query
required: true
description: The path of the zip file to create
schema:
type: string
get:
description: Create a zip file of the ZAP core and add-on SBOMs
operationId: coreActionCreateSbomZip
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/deleteAlert/:
parameters:
- name: id
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoint with the same name in the 'alert' component instead.
deprecated: true
operationId: coreActionDeleteAlert
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/deleteAllAlerts/:
get:
description: Use the API endpoint with the same name in the 'alert' component instead.
deprecated: true
operationId: coreActionDeleteAllAlerts
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/deleteSiteNode/:
parameters:
- name: url
in: query
required: true
description: ''
schema:
type: string
- name: method
in: query
description: ''
schema:
type: string
- name: postData
in: query
description: ''
schema:
type: string
get:
description: 'Deletes the site node found in the Sites Tree on the basis of the URL, HTTP method, and post data (if applicable and specified). '
operationId: coreActionDeleteSiteNode
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/disableAllProxyChainExcludedDomains/:
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionDisableAllProxyChainExcludedDomains
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/disableClientCertificate/:
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionDisableClientCertificate
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/enableAllProxyChainExcludedDomains/:
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionEnableAllProxyChainExcludedDomains
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/enablePKCS12ClientCertificate/:
parameters:
- name: filePath
in: query
required: true
description: ''
schema:
type: string
- name: password
in: query
required: true
description: ''
schema:
type: string
- name: index
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionEnablePKCS12ClientCertificate
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/excludeFromProxy/:
parameters:
- name: regex
in: query
required: true
description: ''
schema:
type: string
get:
description: Adds a regex of URLs that should be excluded from the local proxies.
operationId: coreActionExcludeFromProxy
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/generateRootCA/:
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionGenerateRootCA
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/loadSession/:
parameters:
- name: name
in: query
required: true
description: ''
schema:
type: string
get:
description: Loads the session with the given name. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.
operationId: coreActionLoadSession
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/modifyProxyChainExcludedDomain/:
parameters:
- name: idx
in: query
required: true
description: ''
schema:
type: string
- name: value
in: query
description: ''
schema:
type: string
- name: isRegex
in: query
description: ''
schema:
type: string
- name: isEnabled
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionModifyProxyChainExcludedDomain
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/newSession/:
parameters:
- name: name
in: query
description: ''
schema:
type: string
- name: overwrite
in: query
description: ''
schema:
type: string
get:
description: Creates a new session, optionally overwriting existing files. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.
operationId: coreActionNewSession
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/removeProxyChainExcludedDomain/:
parameters:
- name: idx
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionRemoveProxyChainExcludedDomain
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/runGarbageCollection/:
get:
description: ''
operationId: coreActionRunGarbageCollection
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/saveSession/:
parameters:
- name: name
in: query
required: true
description: The name (or path) of the session. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.
schema:
type: string
- name: overwrite
in: query
description: If existing files should be overwritten, attempting to overwrite the files of the session already in use/saved will lead to an error ("already_exists").
schema:
type: string
get:
description: Saves the session.
operationId: coreActionSaveSession
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/sendRequest/:
parameters:
- name: request
in: query
required: true
description: ''
schema:
type: string
- name: followRedirects
in: query
description: ''
schema:
type: string
get:
description: Sends the HTTP request, optionally following redirections. Returns the request sent and response received and followed redirections, if any. The Mode is enforced when sending the request (and following redirections), custom manual requests are not allowed in 'Safe' mode nor in 'Protected' mode if out of scope.
operationId: coreActionSendRequest
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setHomeDirectory/:
parameters:
- name: dir
in: query
required: true
description: ''
schema:
type: string
get:
description: ''
operationId: coreActionSetHomeDirectory
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setLogLevel/:
parameters:
- name: name
in: query
required: true
description: The logger name for which the logging level should be set.
schema:
type: string
- name: logLevel
in: query
required: true
description: The logging level which should be set.
schema:
type: string
get:
description: Sets the logging level for a given logger name.
operationId: coreActionSetLogLevel
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setMode/:
parameters:
- name: mode
in: query
required: true
description: ''
schema:
type: string
get:
description: Sets the mode, which may be one of [safe, protect, standard, attack]
operationId: coreActionSetMode
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionAlertOverridesFilePath/:
parameters:
- name: filePath
in: query
description: ''
schema:
type: string
get:
description: Sets (or clears, if empty) the path to the file with alert overrides.
operationId: coreActionSetOptionAlertOverridesFilePath
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionDefaultUserAgent/:
parameters:
- name: String
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionDefaultUserAgent
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionDnsTtlSuccessfulQueries/:
parameters:
- name: Integer
in: query
required: true
description: ''
schema:
type: integer
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionDnsTtlSuccessfulQueries
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionHttpStateEnabled/:
parameters:
- name: Boolean
in: query
required: true
description: ''
schema:
type: boolean
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionHttpStateEnabled
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionMaximumAlertInstances/:
parameters:
- name: numberOfInstances
in: query
required: true
description: ''
schema:
type: string
get:
description: Sets the maximum number of alert instances to include in a report. A value of zero is treated as unlimited.
operationId: coreActionSetOptionMaximumAlertInstances
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionMergeRelatedAlerts/:
parameters:
- name: enabled
in: query
required: true
description: ''
schema:
type: string
get:
description: Sets whether or not related alerts will be merged in any reports generated.
operationId: coreActionSetOptionMergeRelatedAlerts
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainName/:
parameters:
- name: String
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionProxyChainName
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainPassword/:
parameters:
- name: String
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionProxyChainPassword
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainPort/:
parameters:
- name: Integer
in: query
required: true
description: ''
schema:
type: integer
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionProxyChainPort
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainPrompt/:
parameters:
- name: Boolean
in: query
required: true
description: ''
schema:
type: boolean
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionProxyChainPrompt
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainRealm/:
parameters:
- name: String
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionProxyChainRealm
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainSkipName/:
parameters:
- name: String
in: query
required: true
description: ''
schema:
type: string
get:
description: Option no longer in effective use.
deprecated: true
operationId: coreActionSetOptionProxyChainSkipName
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionProxyChainUserName/:
parameters:
- name: String
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionProxyChainUserName
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionSingleCookieRequestHeader/:
parameters:
- name: Boolean
in: query
required: true
description: ''
schema:
type: boolean
get:
description: Option no longer in effective use.
deprecated: true
operationId: coreActionSetOptionSingleCookieRequestHeader
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionTimeoutInSecs/:
parameters:
- name: Integer
in: query
required: true
description: ''
schema:
type: integer
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionTimeoutInSecs
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionUseProxyChain/:
parameters:
- name: Boolean
in: query
required: true
description: ''
schema:
type: boolean
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionUseProxyChain
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionUseProxyChainAuth/:
parameters:
- name: Boolean
in: query
required: true
description: ''
schema:
type: boolean
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionUseProxyChainAuth
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/setOptionUseSocksProxy/:
parameters:
- name: Boolean
in: query
required: true
description: true if the SOCKS proxy should be used, false otherwise.
schema:
type: boolean
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreActionSetOptionUseSocksProxy
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/shutdown/:
get:
description: Shuts down ZAP
operationId: coreActionShutdown
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/action/snapshotSession/:
parameters:
- name: name
in: query
description: ''
schema:
type: string
- name: overwrite
in: query
description: ''
schema:
type: string
get:
description: Snapshots the session, optionally with the given name, and overwriting existing files. If no name is specified the name of the current session with a timestamp appended is used. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.
operationId: coreActionSnapshotSession
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/OTHER/core/other/fileDownload/:
parameters:
- name: fileName
in: query
required: true
description: The name of the file, may include subdirectories
schema:
type: string
get:
description: Download a file from the transfer directory
operationId: coreOtherFileDownload
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/fileUpload/:
parameters:
- name: fileName
in: query
required: true
description: The name of the file, may include subdirectories.
schema:
type: string
- name: fileContents
in: query
required: true
description: The contents of the file.
schema:
type: string
get:
description: Upload a file to the transfer directory. Only POST requests accepted with encodings of "multipart/form-data" or "application/x-www-form-urlencoded".
operationId: coreOtherFileUpload
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/htmlreport/:
get:
description: Use the 'generate' API endpoint the 'reports' component instead.
deprecated: true
operationId: coreOtherHtmlreport
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/jsonreport/:
get:
description: Use the 'generate' API endpoint the 'reports' component instead.
deprecated: true
operationId: coreOtherJsonreport
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/mdreport/:
get:
description: Use the 'generate' API endpoint the 'reports' component instead.
deprecated: true
operationId: coreOtherMdreport
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/messageHar/:
parameters:
- name: id
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'exim' add-on instead.
deprecated: true
operationId: coreOtherMessageHar
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/messagesHar/:
parameters:
- name: baseurl
in: query
description: ''
schema:
type: string
- name: start
in: query
description: ''
schema:
type: string
- name: count
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'exim' add-on instead.
deprecated: true
operationId: coreOtherMessagesHar
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/messagesHarById/:
parameters:
- name: ids
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'exim' add-on instead.
deprecated: true
operationId: coreOtherMessagesHarById
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/proxy.pac/:
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreOtherProxy.pac
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/rootcert/:
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreOtherRootcert
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/sendHarRequest/:
parameters:
- name: request
in: query
required: true
description: ''
schema:
type: string
- name: followRedirects
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'exim' add-on instead.
deprecated: true
operationId: coreOtherSendHarRequest
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/setproxy/:
parameters:
- name: proxy
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoints in the 'network' component instead.
deprecated: true
operationId: coreOtherSetproxy
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/OTHER/core/other/xmlreport/:
get:
description: Use the 'generate' API endpoint the 'reports' component instead.
deprecated: true
operationId: coreOtherXmlreport
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorOther'
/JSON/core/view/alert/:
parameters:
- name: id
in: query
required: true
description: ''
schema:
type: string
get:
description: Use the API endpoint with the same name in the 'alert' component instead.
deprecated: true
operationId: coreViewAlert
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/alerts/:
parameters:
- name: baseurl
in: query
description: The highest URL in the Sites tree under which alerts should be included.
schema:
type: string
- name: start
in: query
description: ''
schema:
type: string
- name: count
in: query
description: ''
schema:
type: string
- name: riskId
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoint with the same name in the 'alert' component instead.
deprecated: true
operationId: coreViewAlerts
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/alertsSummary/:
parameters:
- name: baseurl
in: query
description: The highest URL in the Sites tree under which alerts should be included.
schema:
type: string
get:
description: Use the API endpoint with the same name in the 'alert' component instead.
deprecated: true
operationId: coreViewAlertsSummary
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/childNodes/:
parameters:
- name: url
in: query
description: ''
schema:
type: string
get:
description: Gets the child nodes underneath the specified URL in the Sites tree
operationId: coreViewChildNodes
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/excludedFromProxy/:
get:
description: Gets the regular expressions, applied to URLs, to exclude from the local proxies.
operationId: coreViewExcludedFromProxy
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/getLogLevel/:
parameters:
- name: name
in: query
description: The name for which the logger details should be provided (this value will be used as a case insensitive starts with filter).
schema:
type: string
get:
description: 'The detailed logging config, optionally filtered based on a name (ex: starts with).'
operationId: coreViewGetLogLevel
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/homeDirectory/:
get:
description: ''
deprecated: true
operationId: coreViewHomeDirectory
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/hosts/:
get:
description: Gets the name of the hosts accessed through/by ZAP
operationId: coreViewHosts
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/message/:
parameters:
- name: id
in: query
required: true
description: ''
schema:
type: string
get:
description: Gets the HTTP message with the given ID. Returns the ID, request/response headers and bodies, cookies, note, type, RTT, and timestamp.
operationId: coreViewMessage
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/messages/:
parameters:
- name: baseurl
in: query
description: The highest URL in the Sites tree under which messages should be included.
schema:
type: string
- name: start
in: query
description: ''
schema:
type: string
- name: count
in: query
description: ''
schema:
type: string
get:
description: Gets the HTTP messages sent by ZAP, request and response, optionally filtered by URL and paginated with 'start' position and 'count' of messages
operationId: coreViewMessages
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/messagesById/:
parameters:
- name: ids
in: query
required: true
description: ''
schema:
type: string
get:
description: Gets the HTTP messages with the given IDs.
operationId: coreViewMessagesById
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/mode/:
get:
description: Gets the mode
operationId: coreViewMode
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/numberOfAlerts/:
parameters:
- name: baseurl
in: query
description: The highest URL in the Sites tree under which alerts should be included.
schema:
type: string
- name: riskId
in: query
description: ''
schema:
type: string
get:
description: Use the API endpoint with the same name in the 'alert' component instead.
deprecated: true
operationId: coreViewNumberOfAlerts
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/numberOfMessages/:
parameters:
- name: baseurl
in: query
description: The highest URL in the Sites tree under which messages should be included.
schema:
type: string
get:
description: Gets the number of messages, optionally filtering by URL
operationId: coreViewNumberOfMessages
tags:
- core
responses:
default:
$ref: '#/components/responses/ErrorJson'
/JSON/core/view/optionAlertOverridesFilePath/:
get:
description: Gets the path to the file with alert overrides.
operationId: coreViewOptionAlertOverridesFilePath
tags:
- core
responses:
default:
$ref: '#/components/res
# --- truncated at 32 KB (40 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/owasp-zap/refs/heads/main/openapi/owasp-zap-core-api-openapi.yml