Research Academy
My account Customers About Blog Careers Legal Contact Resellers

DAST

Integrating with Google Apigee

  • Last updated: May 12, 2026

  • Read time: 2 Minutes

You can integrate Burp Suite DAST with Google Apigee to automatically discover APIs in your Google Apigee organization.

Note

This integration gives Burp Suite DAST read-only access to Google Apigee. No APIs are created or scanned during the setup process. Once the connection is established, discovered APIs are shown in API finder.

This integration supports Apigee X and Apigee hybrid. It does not support Apigee Edge.

Burp Suite DAST only discovers APIs that have an OpenAPI specification attached to the proxy revision as a resource file. APIs whose specifications are stored in the Apigee Spec Store are not discovered.

Prerequisites

  1. You have Modify Settings permission in Burp Suite DAST.
  2. You have a Google Cloud service account and have a service account email and private key for it.
  3. The service account has the built-in Apigee Read-Only Admin role assigned on the GCP project that contains your Apigee organization.

Connecting to Google Apigee

  1. Go to Settings > Integrations.
  2. On the Google Apigee tile, click Configure.
  3. Click Add integration. The Google Apigee connection details dialog opens.
  4. Enter a name in the Integration name field.
  5. Enter your connection details:
    • Organization - The name of your Apigee organization.
    • Service account email - The client_email value from your service account JSON key.
    • Private key - The private_key value from your service account JSON key. Include the entire PEM block, including the -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY----- lines.
  6. Enter a schedule for how often you want Burp Suite DAST to check the organization for updates. The minimum interval is 15 minutes.
  7. Click Save.

Once Burp Suite DAST connects to Google Apigee successfully, a confirmation message appears. The connection is then listed on the Integrations page, where you can see its status and how many APIs have been discovered.

To manage the APIs discovered by the integration:

  1. Click View discovered APIs to go to API finder.
  2. Click on an API to review its status.
  3. Select multiple APIs and click Create sites to create an API site for each API. For more information, see Creating sites for added APIs.

When a scheduled update discovers changes to your APIs, you will see a red notification dot in the API finder tab. For more information, see Updating your API sites

Related pages