Object

ScopeV2

The URLs that Burp Scanner is allowed to crawl and audit during scans of a given site. The scope includes all the subdirectories of the in-scope URL prefixes. It excludes all the subdirectories of the out-of-scope URL prefixes.

Fields

start_urls(): [String!]!
The URLs that Burp Scanner begins the scan from.
in_scope_url_prefixes(): [String!]!
A list of URLs that Burp Scanner is allowed to scan. If the list is empty, the site scope is automatically derived from the start URLs.
out_of_scope_url_prefixes(): [String!]!
A list of URLs that will be skipped during scans of this site. For example, if a particular subdirectory contains sensitive data, you can enter its URL here to exclude it from scans. All subdirectories of an excluded URL will also be skipped.
protocol_options(): ScopeProtocolOptions
Options to determine which protocols are used when scanning your site's URLs.

Example

Query 
query GetSiteScopeV2($site_id: ID!) {
  site(id: $site_id) {
    scope_v2 {
      start_urls
      in_scope_url_prefixes
      out_of_scope_url_prefixes
      protocol_options
    }
  }
}
Result 
{
  "data": {
    "site": {
      "scope_v2": {
        "start_urls": [],
        "in_scope_url_prefixes": [],
        "out_of_scope_url_prefixes": [],
        "protocol_options": null
      },
    }
  }
}