Getting started with the GraphQL API – The Daily Swig

ENTERPRISE

You can use the GraphQL API to integrate Burp Suite Enterprise Edition with your own software or a third-party tool. This page explains some points you should be aware of as you get started with the GraphQL API.

To use the GraphQL API you must create a dedicated API user in Burp Suite Enterprise Edition. For instructions on how to create an API user, see Creating API users.

You can only use the API to perform actions that your user has permission for. For instructions on how to appropriately configure the permissions for the user, see Role-based access control.

All operations are performed by sending POST requests to your-web-server-url/graphq1/v1. You do not need to use different endpoints for different query or mutation types as you would in a REST API.

To authorize your request, enter an Authorization header with your API key as its value.

This example shows a GetSiteTree request in cURL format.

We recommend that you use Insomnia to build and test GraphQL calls. Insomnia integrates with our GraphQL schema documentation and allows you to easily convert your GraphQL request to other formats.

To access our GraphQL schema documentation in Insomnia, click the schema button under the GraphQL Query tab. This brings up a searchable menu of Burp Suite Enterprise Edition queries and mutations.

To use Insomnia to convert your GraphQL request to other formats, right-click the request and select Generate Code.

Link:

Getting started with the GraphQL API - The Daily Swig