Additional Output Formats

Specialized output formats like only-url, only-param, markdown-table, and Postman collections.

Filtering with only-* Formats

Extract a single type of data from scan results.

URLs Only

noir scan . -f only-url
/
/query
/token
/socket
/1.html
/2.html

Parameters Only

noir scan . -f only-param
query
client_id
redirect_url
grant_type

Headers Only

noir scan . -f only-header
x-api-key
Cookie

Cookies Only

noir scan . -f only-cookie
my_auth

Tags Only

noir scan . -f only-tag -T
sqli
oauth
websocket

Markdown Table

noir scan . -f markdown-table
Endpoint Protocol Params
GET / http x-api-key (header)
POST /query http my_auth (cookie) query (form)
GET /token http client_id (form) redirect_url (form) grant_type (form)
GET /socket ws
GET /1.html http
GET /2.html http

TOML

noir scan . -f toml
[[endpoints]]
callees = []
url = "/"
method = "GET"
internal = false
details = { code_paths = [{ path = "src/testapp.cr", line = 3 }], technology = "crystal_kemal" }
protocol = "http"
kind = ""
tags = []
params = [{ name = "x-api-key", value = "", param_type = "header", tags = [] }]

[[endpoints]]
callees = []
url = "/query"
method = "POST"
internal = false
details = { code_paths = [{ path = "src/testapp.cr", line = 17 }], technology = "crystal_kemal" }
protocol = "http"
kind = ""
tags = []
params = [{ name = "my_auth", value = "", param_type = "cookie", tags = [] }, { name = "query", value = "", param_type = "form", tags = [] }]

Configuration-style output that's easy to skim in a terminal or paste into a project config when you want to track endpoints alongside other declarative settings. The TOML serializer carries the full endpoint model (including --include callee and --ai-context fields when those flags are enabled), and is also the format used by --diff-path output when combined with -f toml.

JSON Lines (JSONL)

JSONL (-f jsonl) is covered together with JSON on the JSON and JSONL page.

Postman Collection

noir scan . -f postman -u https://api.example.com

Generates a Postman Collection v2.1 JSON file. Save the output and import it into Postman for interactive API testing.

{
  "info": {
    "name": "Generated by Noir",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "item": [
    {
      "name": "GET api.example.com/",
      "request": {
        "method": "GET",
        "header": [
          {
            "key": "x-api-key",
            "value": ""
          }
        ],
        "url": {
          "raw": "https://api.example.com/",
          "host": ["api", "example", "com"],
          "path": [],
          "protocol": "https"
        }
      }
    }
  ]
}