OWASP ZAP websocket API

The websocket API from OWASP ZAP — 6 operation(s) for websocket.

OpenAPI Specification

owasp-zap-websocket-api-openapi.yml Raw ↑
openapi: 3.0.3
info:
  title: ZAP accessControl websocket API
  description: The HTTP API for controlling and accessing ZAP.
  contact:
    name: ZAP User Group
    url: https://groups.google.com/group/zaproxy-users
    email: zaproxy-users@googlegroups.com
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  version: 2.16.1
servers:
- url: http://zap
  description: The URL while proxying through ZAP.
- url: http://{address}:{port}
  description: The URL of a Local Proxy of ZAP.
  variables:
    address:
      description: The address ZAP is listening on.
      default: 127.0.0.1
    port:
      description: The port ZAP is bound to.
      default: '8080'
security:
- {}
- apiKeyHeader: []
- apiKeyQuery: []
tags:
- name: websocket
paths:
  /JSON/websocket/action/sendTextMessage/:
    parameters:
    - name: channelId
      in: query
      required: true
      description: ''
      schema:
        type: string
    - name: outgoing
      in: query
      required: true
      description: ''
      schema:
        type: string
    - name: message
      in: query
      required: true
      description: ''
      schema:
        type: string
    get:
      description: Sends the specified message on the channel specified by channelId, if outgoing is 'True' then the message will be sent to the server and if it is 'False' then it will be sent to the client
      operationId: websocketActionSendTextMessage
      tags:
      - websocket
      responses:
        default:
          $ref: '#/components/responses/ErrorJson'
  /JSON/websocket/action/setBreakTextMessage/:
    parameters:
    - name: message
      in: query
      required: true
      description: ''
      schema:
        type: string
    - name: outgoing
      in: query
      required: true
      description: ''
      schema:
        type: string
    get:
      description: Sets the text message for an intercepted websockets message
      operationId: websocketActionSetBreakTextMessage
      tags:
      - websocket
      responses:
        default:
          $ref: '#/components/responses/ErrorJson'
  /JSON/websocket/view/breakTextMessage/:
    get:
      description: Returns a text representation of an intercepted websockets message
      operationId: websocketViewBreakTextMessage
      tags:
      - websocket
      responses:
        default:
          $ref: '#/components/responses/ErrorJson'
  /JSON/websocket/view/channels/:
    get:
      description: Returns all of the registered web socket channels
      operationId: websocketViewChannels
      tags:
      - websocket
      responses:
        default:
          $ref: '#/components/responses/ErrorJson'
  /JSON/websocket/view/message/:
    parameters:
    - name: channelId
      in: query
      required: true
      description: ''
      schema:
        type: string
    - name: messageId
      in: query
      required: true
      description: ''
      schema:
        type: string
    get:
      description: Returns full details of the message specified by the channelId and messageId
      operationId: websocketViewMessage
      tags:
      - websocket
      responses:
        default:
          $ref: '#/components/responses/ErrorJson'
  /JSON/websocket/view/messages/:
    parameters:
    - name: channelId
      in: query
      description: ''
      schema:
        type: string
    - name: start
      in: query
      description: ''
      schema:
        type: string
    - name: count
      in: query
      description: ''
      schema:
        type: string
    - name: payloadPreviewLength
      in: query
      description: ''
      schema:
        type: string
    get:
      description: Returns a list of all of the messages that meet the given criteria (all optional), where channelId is a channel identifier, start is the offset to start returning messages from (starting from 0), count is the number of messages to return (default no limit) and payloadPreviewLength is the maximum number bytes to return for the payload contents
      operationId: websocketViewMessages
      tags:
      - websocket
      responses:
        default:
          $ref: '#/components/responses/ErrorJson'
components:
  responses:
    ErrorJson:
      description: Error of JSON endpoints.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorJson'
  schemas:
    ErrorJson:
      type: object
      required:
      - code
      - message
      properties:
        code:
          type: string
        message:
          type: string
        detail:
          type: string
  securitySchemes:
    apiKeyHeader:
      type: apiKey
      name: X-ZAP-API-Key
      in: header
    apiKeyQuery:
      type: apiKey
      name: apikey
      in: query