Getting started with the GraphQL API - Port Swigger
Summary: PortSwigger's documentation describes how to use the GraphQL API to integrate Burp Suite DAST with your own or third-party software, requiring a dedicated API user whose permissions limit what the API can do. All operations are sent as POST requests to your-web-server-url/graphql/v1 with an API key in the Authorization header, and PortSwigger recommends Insomnia for building and testing calls.
Bottom line: The API can only perform actions the dedicated API user is permitted to do, so the role-based access control configured on that account sets the boundary for everything an integration can reach.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026