📄 zaproxy/desktop/addons/graphql-support/alerts

File: alerts.md | Updated: 11/18/2025

Source: https://www.zaproxy.org/docs/desktop/addons/graphql-support/alerts/

GraphQL Alerts

The following alerts are raised by the GraphQL add-on.

| Alert Reference | Name | Description | Latest Code | | --- | --- | --- | --- | | 50007-1 | GraphQL Endpoint Supports Introspection | This alert is raised when the spider discovers a GraphQL endpoint that supports introspection. | GraphQlParser.java | | 50007-2 | GraphQL Server Implementation Identified | This alert is raised when the GraphQL implementation used by the server is identified. It utilises fingerprinting techniques adapted from the tool graphw00f<br>. Note: If the Tech Detection (Wappalyzer) add-on is installed the fingerprinter will also add identified GraphQL Engines to the Technology tab/data. | GraphQlFingerprinter.java |

Alert ID: 50007 .

Supported Engines


See also


| | | | | --- | --- | --- | | | GraphQL | for an overview of the GraphQL add-on. | | | GraphQL Options | for information about the optional parameters. | | | GraphQL Automation | for information about the automation framework support. | | | GraphQL Variant | for information about the GraphQL variant. |