Research Academy
My account Customers About Blog Careers Legal Contact Resellers

DAST

Bulk uploading APIs

  • Last updated: January 29, 2026

  • Read time: 2 Minutes

This page explains how to create multiple API sites in one operation. Each file or URL creates its own site. Bulk uploading speeds up the process of onboarding large numbers of APIs and helps ensure consistent configuration across your API estate.

Before you start

Make sure you have the API definition files ready or know the URLs where they are hosted. You can upload a mix of Postman Collections, OpenAPI definitions, and SOAP WSDL files.

Note

You must have permission to scan all URLs included in the scope of the imported sites.

How to bulk upload APIs

To bulk upload APIs, go to Sites and select Bulk upload APIs. Complete the following steps:

Import type

  1. Choose how to add your API definitions:

    • Upload files - Select API definition files from your local machine. Click Upload more files to add additional files.

    • Host URLs - Paste a list of links to the URLs of your API definition files.

  2. If you want to remove any of the uploaded files, select the tick boxes and click Delete.

  3. Click Next.

Choose folder

  1. Select a destination folder for the imported sites.

  2. Click Next.

Network

  1. Configure the network settings that apply to all imported sites:

  2. Click Next.

Review upload

  1. Review the sites that will be created. Make any necessary changes.

  2. To remove one or more sites, select their tick boxes and click Delete.

  3. If any sites failed parsing, download the log to view more details about the errors.

  4. Click Next.

Authentication

You can view detected authentication types for your sites, or add them. Any authentication you add manually applies to all sites in this bulk upload.

To add authentication credentials:

  1. Click Add more.

  2. Select Basic, Bearer auth, API key / Custom token, or OAuth 2.0 client credentials.

  3. Enter the details for the chosen authentication method.

  4. Click Save.

  5. To edit authentication credentials, click the pencil icon.

  6. Click Next.

Scan configuration

  1. Choose the scan configuration:

    • Default configuration - Uses the default scan configuration for API sites. If the parent folder has scan configurations applied, your sites inherit those configurations instead.

    • Use a custom configuration - Select a custom scan configuration.

  2. Under Extensions, select the BChecks and custom extensions you want to use. Click Select all BChecks to use all available checks.

  3. Click Import.

Burp Suite DAST creates a separate site for each API definition and adds them to the site tree in the selected folder.

After bulk upload

After importing your APIs, you can:

  • Add or update authentication credentials for individual sites.

  • Fine-tune scan configurations for specific sites.

  • Schedule scans for your imported sites.

For more information, see Configuring site settings.

Related pages