PortSwigger

Burp Suite DAST REST API

A REST API for Burp Suite DAST that offers compatibility for users familiar with the Burp Suite Professional API. Supports initiating scans from CI/CD systems and failing builds on issue detection. The API is self-documenting via interactive docs served at the server URL; API key authentication is required. GraphQL is recommended for new integrations as REST exposes a more limited feature set.

GitHub

Documentation

📖
Documentation
https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/rest

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/dast-rest-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: portswigger:dast-rest-api
name: Burp Suite DAST REST API
description: A REST API for Burp Suite DAST that offers compatibility for users familiar with the Burp
  Suite Professional API. Supports initiating scans from CI/CD systems and failing builds on issue detection.
  The API is self-documenting via interactive docs served at the server URL; API key authentication is
  required. GraphQL is recommended for new integrations as REST exposes a more limited feature set.
humanURL: https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/rest
tags:
- REST
- DAST
- CI/CD
- Security Scanning
properties:
- type: Documentation
  url: https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/rest