zap_findings_details
Drill into security scan findings to get grouped alert details or raw instances with concrete URLs, evidence, and attack samples. Filter by base URL, plugin ID, or alert name.
Instructions
Drill into findings after reading the summary. By default this returns grouped details for matching alerts. Set includeInstances=true when you need bounded raw alert occurrences with concrete URLs, params, evidence, or attack samples.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Optional instance limit used only when includeInstances is true | |
| baseUrl | No | Optional base URL filter to scope findings to one host or path | |
| pluginId | No | Optional plugin ID filter when you already know the ZAP alert/plugin identifier to inspect | |
| alertName | No | Optional alert name filter when you want one alert family only | |
| includeInstances | No | Optional true to include bounded raw instances with concrete URLs and evidence; false returns grouped detail blocks |