# Web API scans

To run an API scan specify the URL path to OpenAPI specification and choose API scanner. It will parse the specification and execute the scan against discovered routes and parameters.

Both Cookies and Authorization header supported by this scan.

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FN8GGloVNxRZ9WjJd3iRD%2Fimage.png?alt=media&#x26;token=3c80a22b-2e52-436f-9861-4f3ce4f514d2" alt=""><figcaption></figcaption></figure>
