OWASP ZAP

OWASP ZAP (Zed Attack Proxy) is an open source web application security scanner for finding vulnerabilities in APIs and web applications during development and testing. ZAP exposes a comprehensive HTTP API for controlling and automating scans, spidering, authentication, alerts, reporting, and more.

OWASP ZAP publishes 49 APIs on the APIs.io network, including Acsrf API, Ajax Spider API, Alert API, and 46 more. Tagged areas include Security Testing, Application Security, Vulnerability Scanning, Testing, and Open Source.

OWASP ZAP’s developer surface includes authentication, engineering blog, documentation, and 15 more developer resources.

🌐 Visit website 📡 Source on GitHub

37.6/100 thin ▬ flat Agent 23/100 agent aware Front door AI 1/6 silent self hosted · Apache-2.0 Full breakdown ↓
scored 2026-10-04 · rubric v0.23.0

AccessFreemiumSelf serve⚡ Free to try

1 published contract

Security Testing Application Security Vulnerability Scanning Testing Open Source

What this lets a business do 1

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

accessControlacsrfajaxSpideralertalertFilterascan

GET /JSON/ascan/action/addScanPolicy/ GET /JSON/ascan/action/enableAllScanners/ GET /JSON/ascan/action/pauseAllScans/ GET /JSON/pscan/action/enableAllScanners/

Kin Score

Kin Score How this is scored →
scored 2026-10-04 · rubric v0.23.0

Composite quality — 37.6/100 · thin

Contract Quality 6.8 / 19

Developer Ergonomics 5.0 / 15

Access Clarity 2.4 / 15

Operational Transparency 3.6 / 10

Contract Governance 0.0 / 9

Discoverability 5.0 / 8

Regulatory Posture 2.6 / 15

Open Source Surface 10.0 / 10

Agent readiness — 23/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 6 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 9 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 4 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Open Source Surface applies to this provider. This product is open source and we read its repository directly, so Open Source Surface carries 10 points of the composite. It is scored from what the repository actually publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the provider rather than inferred from our own catalog pointers. This facet adds; nothing was taken away to make room for it. An open-source project is not excused from the commercial facets, because exemption would strip it of the points it does earn. If we have the wrong repository, or this product is not open source, say so on your provider repo and we will drop the facet rather than have you publish against it.

Create-or-Update Ergonomics does not apply to this provider. The published contracts declare no write operations, and a read-only API cannot create-or-update. The facet is excluded from this provider's denominator entirely — not scored zero. A reference or data API is not deficient for being unable to upsert.

The six quality facets above are damped to 75 points between them, because both conditional facets apply and carry 25 points together. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/owasp-zap: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 49

Individual APIs this provider publishes, each with its own machine-readable definition.

OWASP ZAP Acsrf API

The acsrf API from OWASP ZAP — 6 operation(s) for acsrf.

OWASP ZAP Ajax Spider API

The ajaxSpider API from OWASP ZAP — 41 operation(s) for ajaxspider.

OWASP ZAP Alert API

The alert API from OWASP ZAP — 13 operation(s) for alert.

OWASP ZAP Alert Filter API

The alertFilter API from OWASP ZAP — 12 operation(s) for alertfilter.

OWASP ZAP Ascan API

The ascan API from OWASP ZAP — 90 operation(s) for ascan.

OWASP ZAP Authentication API

The authentication API from OWASP ZAP — 8 operation(s) for authentication.

OWASP ZAP Authorization API

The authorization API from OWASP ZAP — 2 operation(s) for authorization.

OWASP ZAP Automation API

The automation API from OWASP ZAP — 3 operation(s) for automation.

OWASP ZAP Autoupdate API

The autoupdate API from OWASP ZAP — 32 operation(s) for autoupdate.

OWASP ZAP Break API

The break API from OWASP ZAP — 11 operation(s) for break.

OWASP ZAP Client API

The client API from OWASP ZAP — 5 operation(s) for client.

OWASP ZAP Client Spider API

The clientSpider API from OWASP ZAP — 3 operation(s) for clientspider.

OWASP ZAP Context API

The context API from OWASP ZAP — 21 operation(s) for context.

OWASP ZAP Core API

The core API from OWASP ZAP — 97 operation(s) for core.

OWASP ZAP Custompayloads API

The custompayloads API from OWASP ZAP — 8 operation(s) for custompayloads.

OWASP ZAP Dev API

The dev API from OWASP ZAP — 1 operation(s) for dev.

OWASP ZAP Exim API

The exim API from OWASP ZAP — 9 operation(s) for exim.

OWASP ZAP Forced User API

The forcedUser API from OWASP ZAP — 4 operation(s) for forceduser.

OWASP ZAP HTTP Sessions API

The httpSessions API from OWASP ZAP — 16 operation(s) for httpsessions.

OWASP ZAP Hud API

The hud API from OWASP ZAP — 37 operation(s) for hud.

OWASP ZAP Keyboard API

The keyboard API from OWASP ZAP — 2 operation(s) for keyboard.

OWASP ZAP Local Proxies API

The localProxies API from OWASP ZAP — 3 operation(s) for localproxies.

OWASP ZAP Network API

The network API from OWASP ZAP — 48 operation(s) for network.

OWASP ZAP Oast API

The oast API from OWASP ZAP — 11 operation(s) for oast.

OWASP ZAP Param Digger API

The paramDigger API from OWASP ZAP — 1 operation(s) for paramdigger.

OWASP ZAP Params API

The params API from OWASP ZAP — 1 operation(s) for params.

OWASP ZAP Pnh API

The pnh API from OWASP ZAP — 8 operation(s) for pnh.

OWASP ZAP Postman API

The postman API from OWASP ZAP — 2 operation(s) for postman.

OWASP ZAP Pscan API

The pscan API from OWASP ZAP — 17 operation(s) for pscan.

OWASP ZAP Quickstartlaunch API

The quickstartlaunch API from OWASP ZAP — 1 operation(s) for quickstartlaunch.

OWASP ZAP Replacer API

The replacer API from OWASP ZAP — 4 operation(s) for replacer.

OWASP ZAP Reports API

The reports API from OWASP ZAP — 3 operation(s) for reports.

OWASP ZAP Retest API

The retest API from OWASP ZAP — 1 operation(s) for retest.

OWASP ZAP Reveal API

The reveal API from OWASP ZAP — 2 operation(s) for reveal.

OWASP ZAP Revisit API

The revisit API from OWASP ZAP — 3 operation(s) for revisit.

OWASP ZAP Rule Config API

The ruleConfig API from OWASP ZAP — 5 operation(s) for ruleconfig.

OWASP ZAP Script API

The script API from OWASP ZAP — 24 operation(s) for script.

OWASP ZAP Search API

The search API from OWASP ZAP — 18 operation(s) for search.

OWASP ZAP Selenium API

The selenium API from OWASP ZAP — 22 operation(s) for selenium.

OWASP ZAP Soap API

The soap API from OWASP ZAP — 2 operation(s) for soap.

OWASP ZAP Spider API

The spider API from OWASP ZAP — 71 operation(s) for spider.

OWASP ZAP Stats API

The stats API from OWASP ZAP — 13 operation(s) for stats.

OWASP ZAP Users API

The users API from OWASP ZAP — 15 operation(s) for users.

OWASP ZAP Wappalyzer API

The wappalyzer API from OWASP ZAP — 3 operation(s) for wappalyzer.

OWASP ZAP Websocket API

The websocket API from OWASP ZAP — 6 operation(s) for websocket.

OWASP ZAP Access Control API

The Access Control API from OWASP ZAP — 4 operation(s) for access control.

OWASP ZAP Graph QL API

The Graph QL API from OWASP ZAP — 20 operation(s) for graph ql.

OWASP ZAP Open API

The Open API API from OWASP ZAP — 2 operation(s) for open api.

OWASP ZAP Session Management API

The Session Management API from OWASP ZAP — 4 operation(s) for session management.

Scroll for all 49

Open Collections 51

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

ZAP accessControl API

OPEN COLLECTION

ZAP accessControl acsrf API

OPEN COLLECTION

ZAP accessControl ajaxSpider API

OPEN COLLECTION

ZAP accessControl alert API

OPEN COLLECTION

ZAP accessControl alertFilter API

OPEN COLLECTION

ZAP accessControl ascan API

OPEN COLLECTION

ZAP accessControl authentication API

OPEN COLLECTION

ZAP accessControl authorization API

OPEN COLLECTION

ZAP accessControl automation API

OPEN COLLECTION

ZAP accessControl autoupdate API

OPEN COLLECTION

ZAP accessControl break API

OPEN COLLECTION

ZAP accessControl client API

OPEN COLLECTION

ZAP accessControl clientSpider API

OPEN COLLECTION

ZAP accessControl context API

OPEN COLLECTION

ZAP accessControl core API

OPEN COLLECTION

ZAP accessControl custompayloads API

OPEN COLLECTION

ZAP accessControl dev API

OPEN COLLECTION

ZAP accessControl exim API

OPEN COLLECTION

ZAP accessControl forcedUser API

OPEN COLLECTION

ZAP accessControl graphql API

OPEN COLLECTION

ZAP accessControl httpSessions API

OPEN COLLECTION

ZAP accessControl hud API

OPEN COLLECTION

ZAP accessControl keyboard API

OPEN COLLECTION

ZAP accessControl localProxies API

OPEN COLLECTION

ZAP accessControl network API

OPEN COLLECTION

ZAP accessControl oast API

OPEN COLLECTION

ZAP accessControl openapi API

OPEN COLLECTION

ZAP accessControl paramDigger API

OPEN COLLECTION

ZAP accessControl params API

OPEN COLLECTION

ZAP accessControl pnh API

OPEN COLLECTION

ZAP accessControl postman API

OPEN COLLECTION

ZAP accessControl pscan API

OPEN COLLECTION

ZAP accessControl quickstartlaunch API

OPEN COLLECTION

ZAP accessControl replacer API

OPEN COLLECTION

ZAP accessControl reports API

OPEN COLLECTION

ZAP accessControl retest API

OPEN COLLECTION

ZAP accessControl reveal API

OPEN COLLECTION

ZAP accessControl revisit API

OPEN COLLECTION

ZAP accessControl ruleConfig API

OPEN COLLECTION

ZAP accessControl script API

OPEN COLLECTION

ZAP accessControl search API

OPEN COLLECTION

ZAP accessControl selenium API

OPEN COLLECTION

ZAP accessControl sessionManagement API

OPEN COLLECTION

ZAP accessControl soap API

OPEN COLLECTION

ZAP accessControl spider API

OPEN COLLECTION

ZAP accessControl stats API

OPEN COLLECTION

ZAP accessControl users API

OPEN COLLECTION

ZAP accessControl wappalyzer API

OPEN COLLECTION

ZAP accessControl websocket API

OPEN COLLECTION

ZAP API

OPEN COLLECTION

Scroll for all 51

Pricing Plans 1

Published pricing tiers and plan structures.

Owasp Zap Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Owasp Zap Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Owasp Zap Finops

FINOPS

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Owasp Zap Authentication

apiKey · 2 schemes

SECURITY

Owasp Zap Domain Security

TLSv1.3 · HSTS

SECURITY

Owasp Zap Vulnerability Disclosure

security.txt · contact published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Owasp Zap Agentic Access

735 operations

735 operations · 0 acting

AGENTIC

Resources

Documentation 3

Reference material describing how the API behaves

ContributionGuide

ContributionGuide

Documentation

Documentation

API Documentation

API Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Build 2

SDKs, sample code, and the tooling you integrate with

CodeOfConduct

CodeOfConduct

GitHubOrganization

GitHubOrganization

Access & Security 4

Authentication, authorization, and security posture

SecurityPolicy

SecurityPolicy

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 3

Status, limits, changes, and where to get help

IssueTracker

IssueTracker

Releases

Releases

Community

Community

Commercial 1

Pricing, plans, and the legal terms of use

License

License

Company 2

The organization behind the API

Blog

Blog

Website

Website

Other 2

Properties that don't map to a standard resource type

CapabilityMap

CapabilityMap

Download

Download

Source (apis.yml)

aid: owasp-zap
name: OWASP ZAP
description: OWASP ZAP (Zed Attack Proxy) is an open source web application security scanner for finding vulnerabilities in
  APIs and web applications during development and testing. ZAP exposes a comprehensive HTTP API for controlling and automating
  scans, spidering, authentication, alerts, reporting, and more.
type: Index
deliveryModel:
  model: self-hosted
  license: Apache-2.0
  open_source: true
  commercial: false
  callable_host: false
  label: Self-hosted open source · you run it yourself
  confidence: high
  source:
  - license
  - openapi
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/owasp-zap.png
tags:
- Security Testing
- Application Security
- Vulnerability Scanning
- Testing
- Open Source
tags_raw:
- Security Testing
- Application Security
- Vulnerability Scanning
- Testing
- Open Source
- Open-Source
url: https://raw.githubusercontent.com/api-evangelist/owasp-zap/refs/heads/main/apis.yml
created: '2026-03-25'
modified: '2026-05-19'
specificationVersion: '0.23'
apis:
- aid: owasp-zap:owasp-zap-acsrf-api
  name: OWASP ZAP Acsrf API
  description: The acsrf API from OWASP ZAP — 6 operation(s) for acsrf.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - acsrf
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-acsrf-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-ajaxspider-api
  name: OWASP ZAP Ajax Spider API
  description: The ajaxSpider API from OWASP ZAP — 41 operation(s) for ajaxspider.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - ajaxSpider
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-ajaxspider-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-alert-api
  name: OWASP ZAP Alert API
  description: The alert API from OWASP ZAP — 13 operation(s) for alert.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Alert
  tags_raw:
  - alert
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-alert-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-alertfilter-api
  name: OWASP ZAP Alert Filter API
  description: The alertFilter API from OWASP ZAP — 12 operation(s) for alertfilter.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - alertFilter
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-alertfilter-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-ascan-api
  name: OWASP ZAP Ascan API
  description: The ascan API from OWASP ZAP — 90 operation(s) for ascan.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - ascan
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-ascan-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-authentication-api
  name: OWASP ZAP Authentication API
  description: The authentication API from OWASP ZAP — 8 operation(s) for authentication.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Authentication
  tags_raw:
  - authentication
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-authentication-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-authorization-api
  name: OWASP ZAP Authorization API
  description: The authorization API from OWASP ZAP — 2 operation(s) for authorization.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Authorization
  tags_raw:
  - authorization
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-authorization-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-automation-api
  name: OWASP ZAP Automation API
  description: The automation API from OWASP ZAP — 3 operation(s) for automation.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Automation
  tags_raw:
  - automation
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-automation-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-autoupdate-api
  name: OWASP ZAP Autoupdate API
  description: The autoupdate API from OWASP ZAP — 32 operation(s) for autoupdate.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Auto-Update
  tags_raw:
  - autoupdate
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-autoupdate-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-break-api
  name: OWASP ZAP Break API
  description: The break API from OWASP ZAP — 11 operation(s) for break.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - break
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-break-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-client-api
  name: OWASP ZAP Client API
  description: The client API from OWASP ZAP — 5 operation(s) for client.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Clients
  tags_raw:
  - client
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-client-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-clientspider-api
  name: OWASP ZAP Client Spider API
  description: The clientSpider API from OWASP ZAP — 3 operation(s) for clientspider.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - clientSpider
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-clientspider-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-context-api
  name: OWASP ZAP Context API
  description: The context API from OWASP ZAP — 21 operation(s) for context.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Context
  tags_raw:
  - context
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-context-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-core-api
  name: OWASP ZAP Core API
  description: The core API from OWASP ZAP — 97 operation(s) for core.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Core
  tags_raw:
  - core
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-core-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-custompayloads-api
  name: OWASP ZAP Custompayloads API
  description: The custompayloads API from OWASP ZAP — 8 operation(s) for custompayloads.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - custompayloads
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-custompayloads-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-dev-api
  name: OWASP ZAP Dev API
  description: The dev API from OWASP ZAP — 1 operation(s) for dev.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Dev
  tags_raw:
  - dev
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-dev-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-exim-api
  name: OWASP ZAP Exim API
  description: The exim API from OWASP ZAP — 9 operation(s) for exim.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - exim
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-exim-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-forceduser-api
  name: OWASP ZAP Forced User API
  description: The forcedUser API from OWASP ZAP — 4 operation(s) for forceduser.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - forcedUser
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-forceduser-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-httpsessions-api
  name: OWASP ZAP HTTP Sessions API
  description: The httpSessions API from OWASP ZAP — 16 operation(s) for httpsessions.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - httpSessions
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-httpsessions-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-hud-api
  name: OWASP ZAP Hud API
  description: The hud API from OWASP ZAP — 37 operation(s) for hud.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - HUD
  tags_raw:
  - hud
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-hud-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-keyboard-api
  name: OWASP ZAP Keyboard API
  description: The keyboard API from OWASP ZAP — 2 operation(s) for keyboard.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Keyboard
  tags_raw:
  - keyboard
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-keyboard-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-localproxies-api
  name: OWASP ZAP Local Proxies API
  description: The localProxies API from OWASP ZAP — 3 operation(s) for localproxies.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - localProxies
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-localproxies-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-network-api
  name: OWASP ZAP Network API
  description: The network API from OWASP ZAP — 48 operation(s) for network.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Networks
  tags_raw:
  - network
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-network-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-oast-api
  name: OWASP ZAP Oast API
  description: The oast API from OWASP ZAP — 11 operation(s) for oast.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - oast
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-oast-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-paramdigger-api
  name: OWASP ZAP Param Digger API
  description: The paramDigger API from OWASP ZAP — 1 operation(s) for paramdigger.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - paramDigger
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-paramdigger-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-params-api
  name: OWASP ZAP Params API
  description: The params API from OWASP ZAP — 1 operation(s) for params.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - params
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-params-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-pnh-api
  name: OWASP ZAP Pnh API
  description: The pnh API from OWASP ZAP — 8 operation(s) for pnh.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - pnh
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-pnh-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-postman-api
  name: OWASP ZAP Postman API
  description: The postman API from OWASP ZAP — 2 operation(s) for postman.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Postman
  tags_raw:
  - postman
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-postman-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-pscan-api
  name: OWASP ZAP Pscan API
  description: The pscan API from OWASP ZAP — 17 operation(s) for pscan.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - pscan
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-pscan-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-quickstartlaunch-api
  name: OWASP ZAP Quickstartlaunch API
  description: The quickstartlaunch API from OWASP ZAP — 1 operation(s) for quickstartlaunch.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - quickstartlaunch
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-quickstartlaunch-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-replacer-api
  name: OWASP ZAP Replacer API
  description: The replacer API from OWASP ZAP — 4 operation(s) for replacer.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - replacer
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-replacer-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-reports-api
  name: OWASP ZAP Reports API
  description: The reports API from OWASP ZAP — 3 operation(s) for reports.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Reports
  tags_raw:
  - reports
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-reports-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-retest-api
  name: OWASP ZAP Retest API
  description: The retest API from OWASP ZAP — 1 operation(s) for retest.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - retest
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-retest-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-reveal-api
  name: OWASP ZAP Reveal API
  description: The reveal API from OWASP ZAP — 2 operation(s) for reveal.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Reveal
  tags_raw:
  - reveal
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-reveal-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-revisit-api
  name: OWASP ZAP Revisit API
  description: The revisit API from OWASP ZAP — 3 operation(s) for revisit.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - revisit
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-revisit-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-ruleconfig-api
  name: OWASP ZAP Rule Config API
  description: The ruleConfig API from OWASP ZAP — 5 operation(s) for ruleconfig.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags: []
  tags_raw:
  - ruleConfig
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-ruleconfig-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-script-api
  name: OWASP ZAP Script API
  description: The script API from OWASP ZAP — 24 operation(s) for script.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Script
  tags_raw:
  - script
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-script-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-search-api
  name: OWASP ZAP Search API
  description: The search API from OWASP ZAP — 18 operation(s) for search.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Search
  tags_raw:
  - search
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-search-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-selenium-api
  name: OWASP ZAP Selenium API
  description: The selenium API from OWASP ZAP — 22 operation(s) for selenium.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Selenium
  tags_raw:
  - selenium
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-selenium-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-soap-api
  name: OWASP ZAP Soap API
  description: The soap API from OWASP ZAP — 2 operation(s) for soap.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - SOAP
  tags_raw:
  - soap
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-soap-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-spider-api
  name: OWASP ZAP Spider API
  description: The spider API from OWASP ZAP — 71 operation(s) for spider.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - spider
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-spider-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-stats-api
  name: OWASP ZAP Stats API
  description: The stats API from OWASP ZAP — 13 operation(s) for stats.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Stats
  tags_raw:
  - stats
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-stats-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-users-api
  name: OWASP ZAP Users API
  description: The users API from OWASP ZAP — 15 operation(s) for users.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - User
  tags_raw:
  - users
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-users-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-wappalyzer-api
  name: OWASP ZAP Wappalyzer API
  description: The wappalyzer API from OWASP ZAP — 3 operation(s) for wappalyzer.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - wappalyzer
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-wappalyzer-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-websocket-api
  name: OWASP ZAP Websocket API
  description: The websocket API from OWASP ZAP — 6 operation(s) for websocket.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - WebSocket
  tags_raw:
  - websocket
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-websocket-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-access-control-api
  name: OWASP ZAP Access Control API
  description: The Access Control API from OWASP ZAP — 4 operation(s) for access control.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Access Control
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-access-control-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-graph-ql-api
  name: OWASP ZAP Graph QL API
  description: The Graph QL API from OWASP ZAP — 20 operation(s) for graph ql.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - GraphQL
  tags_raw:
  - Graph QL
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-graph-ql-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-open-api-api
  name: OWASP ZAP Open API
  description: The Open API API from OWASP ZAP — 2 operation(s) for open api.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - OpenAPI
  tags_raw:
  - Open API
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-open-api-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
- aid: owasp-zap:owasp-zap-session-management-api
  name: OWASP ZAP Session Management API
  description: The Session Management API from OWASP ZAP — 4 operation(s) for session management.
  humanURL: https://www.zaproxy.org
  baseURL: http://zap
  tags:
  - Session Management
  properties:
  - type: OpenAPI
    url: openapi/owasp-zap-session-management-api-openapi.yml
  - type: Documentation
    url: https://www.zaproxy.org/docs/
  - type: API Documentation
    url: https://www.zaproxy.org/docs/api/
  - type: GitHubRepository
    url: https://github.com/zaproxy/zaproxy
  - type: GitHub API Docs
    url: https://github.com/zaproxy/zap-api-docs
common:
- type: CapabilityMap
  url: capabilities/owasp-zap-capability-edges.yml
  name: OWASP ZAP Business Capability Map
- type: IssueTracker
  url: https://github.com/zaproxy/zaproxy/issues
- type: Releases
  url: https://github.com/zaproxy/zaproxy/releases
- type: SecurityPolicy
  url: https://github.com/zaproxy/zaproxy/blob/main/SECURITY.md
- type: CodeOfConduct
  url: https://github.com/zaproxy/.github/blob/master/.github/CODE_OF_CONDUCT.md
- type: ContributionGuide
  url: https://github.com/zaproxy/zaproxy/blob/main/CONTRIBUTING.md
- type: License
  name: Apache-2.0
  url: https://github.com/zaproxy/zaproxy/blob/main/LICENSE
- type: AgenticAccess
  url: agentic-access/owasp-zap-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/owasp-zap-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/owasp-zap-domain-security.yml
- type: Authentication
  url: authentication/owasp-zap-authentication.yml
- url: https://www.zaproxy.org/blog/index.xml
  type: Blog
- type: Website
  url: https://www.zaproxy.org
- type: Documentation
  url: https://www.zaproxy.org/docs/
- type: API Documentation
  url: https://www.zaproxy.org/docs/api/
- type: GitHubOrganization
  url: https://github.com/zaproxy
- type: Download
  url: https://www.zaproxy.org/download/
- type: Community
  url: https://groups.google.com/group/zaproxy-users
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/owasp-zap"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/owasp-zap/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/owasp-zap/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.