OWASP ZAP · Capability

ZAP API — core

ZAP API — core. 97 operations. Lead operation: core. Self-contained Naftiko capability covering one Owasp Zap business surface.

Run with Naftiko Owasp Zapcore

What You Can Do

GET
Coreactionaccessurl — Convenient and simple action to access a URL, optionally following redirections. Returns the request sent and response received and followed redirections, if any. Other actions are available which offer more control on what is sent, like, '
/v1/json/core/action/accessurl
GET
Coreactionaddproxychainexcludeddomain — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/addproxychainexcludeddomain
GET
Coreactionclearexcludedfromproxy — Clears the regexes of URLs excluded from the local proxies.
/v1/json/core/action/clearexcludedfromproxy
GET
Coreactioncreatesbomzip — Create a zip file of the ZAP core and add-on SBOMs
/v1/json/core/action/createsbomzip
GET
Coreactiondeletealert — Use the API endpoint with the same name in the 'alert' component instead.
/v1/json/core/action/deletealert
GET
Coreactiondeleteallalerts — Use the API endpoint with the same name in the 'alert' component instead.
/v1/json/core/action/deleteallalerts
GET
Coreactiondeletesitenode — Deletes the site node found in the Sites Tree on the basis of the URL, HTTP method, and post data (if applicable and specified).
/v1/json/core/action/deletesitenode
GET
Coreactiondisableallproxychainexcludeddomains — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/disableallproxychainexcludeddomains
GET
Coreactiondisableclientcertificate — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/disableclientcertificate
GET
Coreactionenableallproxychainexcludeddomains — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/enableallproxychainexcludeddomains
GET
Coreactionenablepkcs12clientcertificate — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/enablepkcs12clientcertificate
GET
Coreactionexcludefromproxy — Adds a regex of URLs that should be excluded from the local proxies.
/v1/json/core/action/excludefromproxy
GET
Coreactiongeneraterootca — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/generaterootca
GET
Coreactionloadsession — Loads the session with the given name. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.
/v1/json/core/action/loadsession
GET
Coreactionmodifyproxychainexcludeddomain — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/modifyproxychainexcludeddomain
GET
Coreactionnewsession — Creates a new session, optionally overwriting existing files. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.
/v1/json/core/action/newsession
GET
Coreactionremoveproxychainexcludeddomain — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/removeproxychainexcludeddomain
GET
Coreactionrungarbagecollection — coreactionrungarbagecollection
/v1/json/core/action/rungarbagecollection
GET
Coreactionsavesession — Saves the session.
/v1/json/core/action/savesession
GET
Coreactionsendrequest — Sends the HTTP request, optionally following redirections. Returns the request sent and response received and followed redirections, if any. The Mode is enforced when sending the request (and following redirections), custom manual requests
/v1/json/core/action/sendrequest
GET
Coreactionsethomedirectory — coreactionsethomedirectory
/v1/json/core/action/sethomedirectory
GET
Coreactionsetloglevel — Sets the logging level for a given logger name.
/v1/json/core/action/setloglevel
GET
Coreactionsetmode — Sets the mode, which may be one of [safe, protect, standard, attack]
/v1/json/core/action/setmode
GET
Coreactionsetoptionalertoverridesfilepath — Sets (or clears, if empty) the path to the file with alert overrides.
/v1/json/core/action/setoptionalertoverridesfilepath
GET
Coreactionsetoptiondefaultuseragent — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptiondefaultuseragent
GET
Coreactionsetoptiondnsttlsuccessfulqueries — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptiondnsttlsuccessfulqueries
GET
Coreactionsetoptionhttpstateenabled — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionhttpstateenabled
GET
Coreactionsetoptionmaximumalertinstances — Sets the maximum number of alert instances to include in a report. A value of zero is treated as unlimited.
/v1/json/core/action/setoptionmaximumalertinstances
GET
Coreactionsetoptionmergerelatedalerts — Sets whether or not related alerts will be merged in any reports generated.
/v1/json/core/action/setoptionmergerelatedalerts
GET
Coreactionsetoptionproxychainname — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionproxychainname
GET
Coreactionsetoptionproxychainpassword — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionproxychainpassword
GET
Coreactionsetoptionproxychainport — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionproxychainport
GET
Coreactionsetoptionproxychainprompt — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionproxychainprompt
GET
Coreactionsetoptionproxychainrealm — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionproxychainrealm
GET
Coreactionsetoptionproxychainskipname — Option no longer in effective use.
/v1/json/core/action/setoptionproxychainskipname
GET
Coreactionsetoptionproxychainusername — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionproxychainusername
GET
Coreactionsetoptionsinglecookierequestheader — Option no longer in effective use.
/v1/json/core/action/setoptionsinglecookierequestheader
GET
Coreactionsetoptiontimeoutinsecs — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptiontimeoutinsecs
GET
Coreactionsetoptionuseproxychain — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionuseproxychain
GET
Coreactionsetoptionuseproxychainauth — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionuseproxychainauth
GET
Coreactionsetoptionusesocksproxy — Use the API endpoints in the 'network' component instead.
/v1/json/core/action/setoptionusesocksproxy
GET
Coreactionshutdown — Shuts down ZAP
/v1/json/core/action/shutdown
GET
Coreactionsnapshotsession — Snapshots the session, optionally with the given name, and overwriting existing files. If no name is specified the name of the current session with a timestamp appended is used. If a relative path is specified it will be resolved against th
/v1/json/core/action/snapshotsession
GET
Coreviewalert — Use the API endpoint with the same name in the 'alert' component instead.
/v1/json/core/view/alert
GET
Coreviewalerts — Use the API endpoint with the same name in the 'alert' component instead.
/v1/json/core/view/alerts
GET
Coreviewalertssummary — Use the API endpoint with the same name in the 'alert' component instead.
/v1/json/core/view/alertssummary
GET
Coreviewchildnodes — Gets the child nodes underneath the specified URL in the Sites tree
/v1/json/core/view/childnodes
GET
Coreviewexcludedfromproxy — Gets the regular expressions, applied to URLs, to exclude from the local proxies.
/v1/json/core/view/excludedfromproxy
GET
Coreviewgetloglevel — The detailed logging config, optionally filtered based on a name (ex: starts with).
/v1/json/core/view/getloglevel
GET
Coreviewhomedirectory — coreviewhomedirectory
/v1/json/core/view/homedirectory
GET
Coreviewhosts — Gets the name of the hosts accessed through/by ZAP
/v1/json/core/view/hosts
GET
Coreviewmessage — Gets the HTTP message with the given ID. Returns the ID, request/response headers and bodies, cookies, note, type, RTT, and timestamp.
/v1/json/core/view/message
GET
Coreviewmessages — Gets the HTTP messages sent by ZAP, request and response, optionally filtered by URL and paginated with 'start' position and 'count' of messages
/v1/json/core/view/messages
GET
Coreviewmessagesbyid — Gets the HTTP messages with the given IDs.
/v1/json/core/view/messagesbyid
GET
Coreviewmode — Gets the mode
/v1/json/core/view/mode
GET
Coreviewnumberofalerts — Use the API endpoint with the same name in the 'alert' component instead.
/v1/json/core/view/numberofalerts
GET
Coreviewnumberofmessages — Gets the number of messages, optionally filtering by URL
/v1/json/core/view/numberofmessages
GET
Coreviewoptionalertoverridesfilepath — Gets the path to the file with alert overrides.
/v1/json/core/view/optionalertoverridesfilepath
GET
Coreviewoptiondefaultuseragent — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optiondefaultuseragent
GET
Coreviewoptiondnsttlsuccessfulqueries — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optiondnsttlsuccessfulqueries
GET
Coreviewoptionhttpstate — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionhttpstate
GET
Coreviewoptionhttpstateenabled — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionhttpstateenabled
GET
Coreviewoptionmaximumalertinstances — Gets the maximum number of alert instances to include in a report.
/v1/json/core/view/optionmaximumalertinstances
GET
Coreviewoptionmergerelatedalerts — Gets whether or not related alerts will be merged in any reports generated.
/v1/json/core/view/optionmergerelatedalerts
GET
Coreviewoptionproxychainname — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionproxychainname
GET
Coreviewoptionproxychainpassword — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionproxychainpassword
GET
Coreviewoptionproxychainport — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionproxychainport
GET
Coreviewoptionproxychainprompt — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionproxychainprompt
GET
Coreviewoptionproxychainrealm — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionproxychainrealm
GET
Coreviewoptionproxychainskipname — Use view proxyChainExcludedDomains instead.
/v1/json/core/view/optionproxychainskipname
GET
Coreviewoptionproxychainusername — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionproxychainusername
GET
Coreviewoptionproxyexcludeddomains — Use view proxyChainExcludedDomains instead.
/v1/json/core/view/optionproxyexcludeddomains
GET
Coreviewoptionproxyexcludeddomainsenabled — Use view proxyChainExcludedDomains instead.
/v1/json/core/view/optionproxyexcludeddomainsenabled
GET
Coreviewoptionsinglecookierequestheader — Option no longer in effective use.
/v1/json/core/view/optionsinglecookierequestheader
GET
Coreviewoptiontimeoutinsecs — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optiontimeoutinsecs
GET
Coreviewoptionuseproxychain — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionuseproxychain
GET
Coreviewoptionuseproxychainauth — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionuseproxychainauth
GET
Coreviewoptionusesocksproxy — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/optionusesocksproxy
GET
Coreviewproxychainexcludeddomains — Use the API endpoints in the 'network' component instead.
/v1/json/core/view/proxychainexcludeddomains
GET
Coreviewsessionlocation — Gets the location of the current session file
/v1/json/core/view/sessionlocation
GET
Coreviewsites — Gets the sites accessed through/by ZAP (scheme and domain)
/v1/json/core/view/sites
GET
Coreviewurls — Gets the URLs accessed through/by ZAP, optionally filtering by (base) URL.
/v1/json/core/view/urls
GET
Coreviewversion — Gets ZAP version
/v1/json/core/view/version
GET
Coreviewzaphomepath — Gets the path to ZAP's home directory.
/v1/json/core/view/zaphomepath
GET
Coreotherfiledownload — Download a file from the transfer directory
/v1/other/core/other/filedownload
GET
Coreotherfileupload — Upload a file to the transfer directory. Only POST requests accepted with encodings of "multipart/form-data" or "application/x-www-form-urlencoded".
/v1/other/core/other/fileupload
GET
Coreotherhtmlreport — Use the 'generate' API endpoint the 'reports' component instead.
/v1/other/core/other/htmlreport
GET
Coreotherjsonreport — Use the 'generate' API endpoint the 'reports' component instead.
/v1/other/core/other/jsonreport
GET
Coreothermdreport — Use the 'generate' API endpoint the 'reports' component instead.
/v1/other/core/other/mdreport
GET
Coreothermessagehar — Use the API endpoints in the 'exim' add-on instead.
/v1/other/core/other/messagehar
GET
Coreothermessageshar — Use the API endpoints in the 'exim' add-on instead.
/v1/other/core/other/messageshar
GET
Coreothermessagesharbyid — Use the API endpoints in the 'exim' add-on instead.
/v1/other/core/other/messagesharbyid
GET
Coreotherproxypac — Use the API endpoints in the 'network' component instead.
/v1/other/core/other/proxy-pac
GET
Coreotherrootcert — Use the API endpoints in the 'network' component instead.
/v1/other/core/other/rootcert
GET
Coreothersendharrequest — Use the API endpoints in the 'exim' add-on instead.
/v1/other/core/other/sendharrequest
GET
Coreothersetproxy — Use the API endpoints in the 'network' component instead.
/v1/other/core/other/setproxy
GET
Coreotherxmlreport — Use the 'generate' API endpoint the 'reports' component instead.
/v1/other/core/other/xmlreport

MCP Tools

convenient-and-simple-action-access

Convenient and simple action to access a URL, optionally following redirections. Returns the request sent and response received and followed redirections, if any. Other actions are available which offer more control on what is sent, like, '

read-only idempotent
use-api-endpoints-network-component

Use the API endpoints in the 'network' component instead.

read-only idempotent
clears-regexes-urls-excluded-local

Clears the regexes of URLs excluded from the local proxies.

read-only idempotent
create-zip-file-zap-core

Create a zip file of the ZAP core and add-on SBOMs

read-only idempotent
use-api-endpoint-same-name

Use the API endpoint with the same name in the 'alert' component instead.

read-only idempotent
use-api-endpoint-same-name-2

Use the API endpoint with the same name in the 'alert' component instead.

read-only idempotent
deletes-site-node-found-sites

Deletes the site node found in the Sites Tree on the basis of the URL, HTTP method, and post data (if applicable and specified).

read-only idempotent
use-api-endpoints-network-component-2

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-3

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-4

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-5

Use the API endpoints in the 'network' component instead.

read-only idempotent
adds-regex-urls-that-should

Adds a regex of URLs that should be excluded from the local proxies.

read-only idempotent
use-api-endpoints-network-component-6

Use the API endpoints in the 'network' component instead.

read-only idempotent
loads-session-given-name-if

Loads the session with the given name. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.

read-only idempotent
use-api-endpoints-network-component-7

Use the API endpoints in the 'network' component instead.

read-only idempotent
creates-new-session-optionally-overwriting

Creates a new session, optionally overwriting existing files. If a relative path is specified it will be resolved against the "session" directory in ZAP "home" dir.

read-only idempotent
use-api-endpoints-network-component-8

Use the API endpoints in the 'network' component instead.

read-only idempotent
coreactionrungarbagecollection

coreactionrungarbagecollection

read-only idempotent
saves-session

Saves the session.

read-only idempotent
sends-http-request-optionally-following

Sends the HTTP request, optionally following redirections. Returns the request sent and response received and followed redirections, if any. The Mode is enforced when sending the request (and following redirections), custom manual requests

read-only idempotent
coreactionsethomedirectory

coreactionsethomedirectory

read-only idempotent
sets-logging-level-given-logger

Sets the logging level for a given logger name.

read-only idempotent
sets-mode-which-may-be

Sets the mode, which may be one of [safe, protect, standard, attack]

read-only idempotent
sets-clears-if-empty-path

Sets (or clears, if empty) the path to the file with alert overrides.

read-only idempotent
use-api-endpoints-network-component-9

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-10

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-11

Use the API endpoints in the 'network' component instead.

read-only idempotent
sets-maximum-number-alert-instances

Sets the maximum number of alert instances to include in a report. A value of zero is treated as unlimited.

read-only idempotent
sets-whether-not-related-alerts

Sets whether or not related alerts will be merged in any reports generated.

read-only idempotent
use-api-endpoints-network-component-12

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-13

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-14

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-15

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-16

Use the API endpoints in the 'network' component instead.

read-only idempotent
option-no-longer-effective-use

Option no longer in effective use.

read-only idempotent
use-api-endpoints-network-component-17

Use the API endpoints in the 'network' component instead.

read-only idempotent
option-no-longer-effective-use-2

Option no longer in effective use.

read-only idempotent
use-api-endpoints-network-component-18

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-19

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-20

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-21

Use the API endpoints in the 'network' component instead.

read-only idempotent
shuts-down-zap

Shuts down ZAP

read-only idempotent
snapshots-session-optionally-given-name

Snapshots the session, optionally with the given name, and overwriting existing files. If no name is specified the name of the current session with a timestamp appended is used. If a relative path is specified it will be resolved against th

read-only idempotent
use-api-endpoint-same-name-3

Use the API endpoint with the same name in the 'alert' component instead.

read-only idempotent
use-api-endpoint-same-name-4

Use the API endpoint with the same name in the 'alert' component instead.

read-only idempotent
use-api-endpoint-same-name-5

Use the API endpoint with the same name in the 'alert' component instead.

read-only idempotent
gets-child-nodes-underneath-specified

Gets the child nodes underneath the specified URL in the Sites tree

read-only idempotent
gets-regular-expressions-applied-urls

Gets the regular expressions, applied to URLs, to exclude from the local proxies.

read-only idempotent
detailed-logging-config-optionally-filtered

The detailed logging config, optionally filtered based on a name (ex: starts with).

read-only idempotent
coreviewhomedirectory

coreviewhomedirectory

read-only idempotent
gets-name-hosts-accessed-through

Gets the name of the hosts accessed through/by ZAP

read-only idempotent
gets-http-message-given-id

Gets the HTTP message with the given ID. Returns the ID, request/response headers and bodies, cookies, note, type, RTT, and timestamp.

read-only idempotent
gets-http-messages-sent-zap

Gets the HTTP messages sent by ZAP, request and response, optionally filtered by URL and paginated with 'start' position and 'count' of messages

read-only idempotent
gets-http-messages-given-ids

Gets the HTTP messages with the given IDs.

read-only idempotent
gets-mode

Gets the mode

read-only idempotent
use-api-endpoint-same-name-6

Use the API endpoint with the same name in the 'alert' component instead.

read-only idempotent
gets-number-messages-optionally-filtering

Gets the number of messages, optionally filtering by URL

read-only idempotent
gets-path-file-alert-overrides

Gets the path to the file with alert overrides.

read-only idempotent
use-api-endpoints-network-component-22

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-23

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-24

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-25

Use the API endpoints in the 'network' component instead.

read-only idempotent
gets-maximum-number-alert-instances

Gets the maximum number of alert instances to include in a report.

read-only idempotent
gets-whether-not-related-alerts

Gets whether or not related alerts will be merged in any reports generated.

read-only idempotent
use-api-endpoints-network-component-26

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-27

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-28

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-29

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-30

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-view-proxychainexcludeddomains-instead

Use view proxyChainExcludedDomains instead.

read-only idempotent
use-api-endpoints-network-component-31

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-view-proxychainexcludeddomains-instead-2

Use view proxyChainExcludedDomains instead.

read-only idempotent
use-view-proxychainexcludeddomains-instead-3

Use view proxyChainExcludedDomains instead.

read-only idempotent
option-no-longer-effective-use-3

Option no longer in effective use.

read-only idempotent
use-api-endpoints-network-component-32

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-33

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-34

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-35

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-36

Use the API endpoints in the 'network' component instead.

read-only idempotent
gets-location-current-session-file

Gets the location of the current session file

read-only idempotent
gets-sites-accessed-through-zap

Gets the sites accessed through/by ZAP (scheme and domain)

read-only idempotent
gets-urls-accessed-through-zap

Gets the URLs accessed through/by ZAP, optionally filtering by (base) URL.

read-only idempotent
gets-zap-version

Gets ZAP version

read-only idempotent
gets-path-zap-s-home-directory

Gets the path to ZAP's home directory.

read-only idempotent
download-file-transfer-directory

Download a file from the transfer directory

read-only idempotent
upload-file-transfer-directory-only

Upload a file to the transfer directory. Only POST requests accepted with encodings of "multipart/form-data" or "application/x-www-form-urlencoded".

read-only idempotent
use-generate-api-endpoint-reports

Use the 'generate' API endpoint the 'reports' component instead.

read-only idempotent
use-generate-api-endpoint-reports-2

Use the 'generate' API endpoint the 'reports' component instead.

read-only idempotent
use-generate-api-endpoint-reports-3

Use the 'generate' API endpoint the 'reports' component instead.

read-only idempotent
use-api-endpoints-exim-add

Use the API endpoints in the 'exim' add-on instead.

read-only idempotent
use-api-endpoints-exim-add-2

Use the API endpoints in the 'exim' add-on instead.

read-only idempotent
use-api-endpoints-exim-add-3

Use the API endpoints in the 'exim' add-on instead.

read-only idempotent
use-api-endpoints-network-component-37

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-network-component-38

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-api-endpoints-exim-add-4

Use the API endpoints in the 'exim' add-on instead.

read-only idempotent
use-api-endpoints-network-component-39

Use the API endpoints in the 'network' component instead.

read-only idempotent
use-generate-api-endpoint-reports-4

Use the 'generate' API endpoint the 'reports' component instead.

read-only idempotent

Capability Spec

owasp-zap-core.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: ZAP API — core
  description: 'ZAP API — core. 97 operations. Lead operation: core. Self-contained Naftiko capability covering one Owasp
    Zap business surface.'
  tags:
  - Owasp Zap
  - core
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    OWASP_ZAP_API_KEY: OWASP_ZAP_API_KEY
capability:
  consumes:
  - type: http
    namespace: owasp-zap-core
    baseUri: http://zap
    description: ZAP API — core business capability. Self-contained, no shared references.
    resources:
    - name: JSON-core-action-accessUrl
      path: /JSON/core/action/accessUrl/
      operations:
      - name: coreactionaccessurl
        method: GET
        description: Convenient and simple action to access a URL, optionally following redirections. Returns the request
          sent and response received and followed redirections, if any. Other actions are available which offer more control
          on what is sent, like, '
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-addProxyChainExcludedDomain
      path: /JSON/core/action/addProxyChainExcludedDomain/
      operations:
      - name: coreactionaddproxychainexcludeddomain
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-clearExcludedFromProxy
      path: /JSON/core/action/clearExcludedFromProxy/
      operations:
      - name: coreactionclearexcludedfromproxy
        method: GET
        description: Clears the regexes of URLs excluded from the local proxies.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-createSbomZip
      path: /JSON/core/action/createSbomZip/
      operations:
      - name: coreactioncreatesbomzip
        method: GET
        description: Create a zip file of the ZAP core and add-on SBOMs
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-deleteAlert
      path: /JSON/core/action/deleteAlert/
      operations:
      - name: coreactiondeletealert
        method: GET
        description: Use the API endpoint with the same name in the 'alert' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-deleteAllAlerts
      path: /JSON/core/action/deleteAllAlerts/
      operations:
      - name: coreactiondeleteallalerts
        method: GET
        description: Use the API endpoint with the same name in the 'alert' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-deleteSiteNode
      path: /JSON/core/action/deleteSiteNode/
      operations:
      - name: coreactiondeletesitenode
        method: GET
        description: Deletes the site node found in the Sites Tree on the basis of the URL, HTTP method, and post data (if
          applicable and specified).
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-disableAllProxyChainExcludedDomains
      path: /JSON/core/action/disableAllProxyChainExcludedDomains/
      operations:
      - name: coreactiondisableallproxychainexcludeddomains
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-disableClientCertificate
      path: /JSON/core/action/disableClientCertificate/
      operations:
      - name: coreactiondisableclientcertificate
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-enableAllProxyChainExcludedDomains
      path: /JSON/core/action/enableAllProxyChainExcludedDomains/
      operations:
      - name: coreactionenableallproxychainexcludeddomains
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-enablePKCS12ClientCertificate
      path: /JSON/core/action/enablePKCS12ClientCertificate/
      operations:
      - name: coreactionenablepkcs12clientcertificate
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-excludeFromProxy
      path: /JSON/core/action/excludeFromProxy/
      operations:
      - name: coreactionexcludefromproxy
        method: GET
        description: Adds a regex of URLs that should be excluded from the local proxies.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-generateRootCA
      path: /JSON/core/action/generateRootCA/
      operations:
      - name: coreactiongeneraterootca
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-loadSession
      path: /JSON/core/action/loadSession/
      operations:
      - name: coreactionloadsession
        method: GET
        description: Loads the session with the given name. If a relative path is specified it will be resolved against the
          "session" directory in ZAP "home" dir.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-modifyProxyChainExcludedDomain
      path: /JSON/core/action/modifyProxyChainExcludedDomain/
      operations:
      - name: coreactionmodifyproxychainexcludeddomain
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-newSession
      path: /JSON/core/action/newSession/
      operations:
      - name: coreactionnewsession
        method: GET
        description: Creates a new session, optionally overwriting existing files. If a relative path is specified it will
          be resolved against the "session" directory in ZAP "home" dir.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-removeProxyChainExcludedDomain
      path: /JSON/core/action/removeProxyChainExcludedDomain/
      operations:
      - name: coreactionremoveproxychainexcludeddomain
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-runGarbageCollection
      path: /JSON/core/action/runGarbageCollection/
      operations:
      - name: coreactionrungarbagecollection
        method: GET
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-saveSession
      path: /JSON/core/action/saveSession/
      operations:
      - name: coreactionsavesession
        method: GET
        description: Saves the session.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-sendRequest
      path: /JSON/core/action/sendRequest/
      operations:
      - name: coreactionsendrequest
        method: GET
        description: 'Sends the HTTP request, optionally following redirections. Returns the request sent and response received
          and followed redirections, if any. The Mode is enforced when sending the request (and following redirections), custom
          manual requests '
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setHomeDirectory
      path: /JSON/core/action/setHomeDirectory/
      operations:
      - name: coreactionsethomedirectory
        method: GET
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setLogLevel
      path: /JSON/core/action/setLogLevel/
      operations:
      - name: coreactionsetloglevel
        method: GET
        description: Sets the logging level for a given logger name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setMode
      path: /JSON/core/action/setMode/
      operations:
      - name: coreactionsetmode
        method: GET
        description: Sets the mode, which may be one of [safe, protect, standard, attack]
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionAlertOverridesFilePath
      path: /JSON/core/action/setOptionAlertOverridesFilePath/
      operations:
      - name: coreactionsetoptionalertoverridesfilepath
        method: GET
        description: Sets (or clears, if empty) the path to the file with alert overrides.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionDefaultUserAgent
      path: /JSON/core/action/setOptionDefaultUserAgent/
      operations:
      - name: coreactionsetoptiondefaultuseragent
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionDnsTtlSuccessfulQueries
      path: /JSON/core/action/setOptionDnsTtlSuccessfulQueries/
      operations:
      - name: coreactionsetoptiondnsttlsuccessfulqueries
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionHttpStateEnabled
      path: /JSON/core/action/setOptionHttpStateEnabled/
      operations:
      - name: coreactionsetoptionhttpstateenabled
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionMaximumAlertInstances
      path: /JSON/core/action/setOptionMaximumAlertInstances/
      operations:
      - name: coreactionsetoptionmaximumalertinstances
        method: GET
        description: Sets the maximum number of alert instances to include in a report. A value of zero is treated as unlimited.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionMergeRelatedAlerts
      path: /JSON/core/action/setOptionMergeRelatedAlerts/
      operations:
      - name: coreactionsetoptionmergerelatedalerts
        method: GET
        description: Sets whether or not related alerts will be merged in any reports generated.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainName
      path: /JSON/core/action/setOptionProxyChainName/
      operations:
      - name: coreactionsetoptionproxychainname
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainPassword
      path: /JSON/core/action/setOptionProxyChainPassword/
      operations:
      - name: coreactionsetoptionproxychainpassword
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainPort
      path: /JSON/core/action/setOptionProxyChainPort/
      operations:
      - name: coreactionsetoptionproxychainport
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainPrompt
      path: /JSON/core/action/setOptionProxyChainPrompt/
      operations:
      - name: coreactionsetoptionproxychainprompt
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainRealm
      path: /JSON/core/action/setOptionProxyChainRealm/
      operations:
      - name: coreactionsetoptionproxychainrealm
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainSkipName
      path: /JSON/core/action/setOptionProxyChainSkipName/
      operations:
      - name: coreactionsetoptionproxychainskipname
        method: GET
        description: Option no longer in effective use.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionProxyChainUserName
      path: /JSON/core/action/setOptionProxyChainUserName/
      operations:
      - name: coreactionsetoptionproxychainusername
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionSingleCookieRequestHeader
      path: /JSON/core/action/setOptionSingleCookieRequestHeader/
      operations:
      - name: coreactionsetoptionsinglecookierequestheader
        method: GET
        description: Option no longer in effective use.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionTimeoutInSecs
      path: /JSON/core/action/setOptionTimeoutInSecs/
      operations:
      - name: coreactionsetoptiontimeoutinsecs
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionUseProxyChain
      path: /JSON/core/action/setOptionUseProxyChain/
      operations:
      - name: coreactionsetoptionuseproxychain
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionUseProxyChainAuth
      path: /JSON/core/action/setOptionUseProxyChainAuth/
      operations:
      - name: coreactionsetoptionuseproxychainauth
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-setOptionUseSocksProxy
      path: /JSON/core/action/setOptionUseSocksProxy/
      operations:
      - name: coreactionsetoptionusesocksproxy
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-shutdown
      path: /JSON/core/action/shutdown/
      operations:
      - name: coreactionshutdown
        method: GET
        description: Shuts down ZAP
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-action-snapshotSession
      path: /JSON/core/action/snapshotSession/
      operations:
      - name: coreactionsnapshotsession
        method: GET
        description: Snapshots the session, optionally with the given name, and overwriting existing files. If no name is
          specified the name of the current session with a timestamp appended is used. If a relative path is specified it
          will be resolved against th
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-alert
      path: /JSON/core/view/alert/
      operations:
      - name: coreviewalert
        method: GET
        description: Use the API endpoint with the same name in the 'alert' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-alerts
      path: /JSON/core/view/alerts/
      operations:
      - name: coreviewalerts
        method: GET
        description: Use the API endpoint with the same name in the 'alert' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-alertsSummary
      path: /JSON/core/view/alertsSummary/
      operations:
      - name: coreviewalertssummary
        method: GET
        description: Use the API endpoint with the same name in the 'alert' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-childNodes
      path: /JSON/core/view/childNodes/
      operations:
      - name: coreviewchildnodes
        method: GET
        description: Gets the child nodes underneath the specified URL in the Sites tree
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-excludedFromProxy
      path: /JSON/core/view/excludedFromProxy/
      operations:
      - name: coreviewexcludedfromproxy
        method: GET
        description: Gets the regular expressions, applied to URLs, to exclude from the local proxies.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-getLogLevel
      path: /JSON/core/view/getLogLevel/
      operations:
      - name: coreviewgetloglevel
        method: GET
        description: 'The detailed logging config, optionally filtered based on a name (ex: starts with).'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-homeDirectory
      path: /JSON/core/view/homeDirectory/
      operations:
      - name: coreviewhomedirectory
        method: GET
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-hosts
      path: /JSON/core/view/hosts/
      operations:
      - name: coreviewhosts
        method: GET
        description: Gets the name of the hosts accessed through/by ZAP
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-message
      path: /JSON/core/view/message/
      operations:
      - name: coreviewmessage
        method: GET
        description: Gets the HTTP message with the given ID. Returns the ID, request/response headers and bodies, cookies,
          note, type, RTT, and timestamp.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-messages
      path: /JSON/core/view/messages/
      operations:
      - name: coreviewmessages
        method: GET
        description: Gets the HTTP messages sent by ZAP, request and response, optionally filtered by URL and paginated with
          'start' position and 'count' of messages
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-messagesById
      path: /JSON/core/view/messagesById/
      operations:
      - name: coreviewmessagesbyid
        method: GET
        description: Gets the HTTP messages with the given IDs.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-mode
      path: /JSON/core/view/mode/
      operations:
      - name: coreviewmode
        method: GET
        description: Gets the mode
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-numberOfAlerts
      path: /JSON/core/view/numberOfAlerts/
      operations:
      - name: coreviewnumberofalerts
        method: GET
        description: Use the API endpoint with the same name in the 'alert' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-numberOfMessages
      path: /JSON/core/view/numberOfMessages/
      operations:
      - name: coreviewnumberofmessages
        method: GET
        description: Gets the number of messages, optionally filtering by URL
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionAlertOverridesFilePath
      path: /JSON/core/view/optionAlertOverridesFilePath/
      operations:
      - name: coreviewoptionalertoverridesfilepath
        method: GET
        description: Gets the path to the file with alert overrides.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionDefaultUserAgent
      path: /JSON/core/view/optionDefaultUserAgent/
      operations:
      - name: coreviewoptiondefaultuseragent
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionDnsTtlSuccessfulQueries
      path: /JSON/core/view/optionDnsTtlSuccessfulQueries/
      operations:
      - name: coreviewoptiondnsttlsuccessfulqueries
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionHttpState
      path: /JSON/core/view/optionHttpState/
      operations:
      - name: coreviewoptionhttpstate
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionHttpStateEnabled
      path: /JSON/core/view/optionHttpStateEnabled/
      operations:
      - name: coreviewoptionhttpstateenabled
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionMaximumAlertInstances
      path: /JSON/core/view/optionMaximumAlertInstances/
      operations:
      - name: coreviewoptionmaximumalertinstances
        method: GET
        description: Gets the maximum number of alert instances to include in a report.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionMergeRelatedAlerts
      path: /JSON/core/view/optionMergeRelatedAlerts/
      operations:
      - name: coreviewoptionmergerelatedalerts
        method: GET
        description: Gets whether or not related alerts will be merged in any reports generated.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainName
      path: /JSON/core/view/optionProxyChainName/
      operations:
      - name: coreviewoptionproxychainname
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainPassword
      path: /JSON/core/view/optionProxyChainPassword/
      operations:
      - name: coreviewoptionproxychainpassword
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainPort
      path: /JSON/core/view/optionProxyChainPort/
      operations:
      - name: coreviewoptionproxychainport
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainPrompt
      path: /JSON/core/view/optionProxyChainPrompt/
      operations:
      - name: coreviewoptionproxychainprompt
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainRealm
      path: /JSON/core/view/optionProxyChainRealm/
      operations:
      - name: coreviewoptionproxychainrealm
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainSkipName
      path: /JSON/core/view/optionProxyChainSkipName/
      operations:
      - name: coreviewoptionproxychainskipname
        method: GET
        description: Use view proxyChainExcludedDomains instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyChainUserName
      path: /JSON/core/view/optionProxyChainUserName/
      operations:
      - name: coreviewoptionproxychainusername
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyExcludedDomains
      path: /JSON/core/view/optionProxyExcludedDomains/
      operations:
      - name: coreviewoptionproxyexcludeddomains
        method: GET
        description: Use view proxyChainExcludedDomains instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionProxyExcludedDomainsEnabled
      path: /JSON/core/view/optionProxyExcludedDomainsEnabled/
      operations:
      - name: coreviewoptionproxyexcludeddomainsenabled
        method: GET
        description: Use view proxyChainExcludedDomains instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionSingleCookieRequestHeader
      path: /JSON/core/view/optionSingleCookieRequestHeader/
      operations:
      - name: coreviewoptionsinglecookierequestheader
        method: GET
        description: Option no longer in effective use.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionTimeoutInSecs
      path: /JSON/core/view/optionTimeoutInSecs/
      operations:
      - name: coreviewoptiontimeoutinsecs
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionUseProxyChain
      path: /JSON/core/view/optionUseProxyChain/
      operations:
      - name: coreviewoptionuseproxychain
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionUseProxyChainAuth
      path: /JSON/core/view/optionUseProxyChainAuth/
      operations:
      - name: coreviewoptionuseproxychainauth
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-optionUseSocksProxy
      path: /JSON/core/view/optionUseSocksProxy/
      operations:
      - name: coreviewoptionusesocksproxy
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-proxyChainExcludedDomains
      path: /JSON/core/view/proxyChainExcludedDomains/
      operations:
      - name: coreviewproxychainexcludeddomains
        method: GET
        description: Use the API endpoints in the 'network' component instead.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-sessionLocation
      path: /JSON/core/view/sessionLocation/
      operations:
      - name: coreviewsessionlocation
        method: GET
        description: Gets the location of the current session file
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-sites
      path: /JSON/core/view/sites/
      operations:
      - name: coreviewsites
        method: GET
        description: Gets the sites accessed through/by ZAP (scheme and domain)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: JSON-core-view-urls
      path: /JSON/core/view/urls/
      operations:
      - name: coreviewurls
        method: GET
        description: Gets the URLs accessed through/by ZAP, optionally filtering by (base) URL.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          

# --- truncated at 32 KB (114 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/owasp-zap/refs/heads/main/capabilities/owasp-zap-core.yaml