Additional Output Formats
Specialized output formats like only-url, only-param, markdown-table, and Postman collections.
Filtering with only-* Formats
Extract a single type of data from scan results.
URLs Only
noir scan . -f only-url
/
/query
/token
/socket
/1.html
/2.html
Parameters Only
noir scan . -f only-param
query
client_id
redirect_url
grant_type
Headers Only
noir scan . -f only-header
x-api-key
Cookie
Cookies Only
noir scan . -f only-cookie
my_auth
Tags Only
noir scan . -f only-tag -T
sqli
oauth
websocket
Markdown Table
noir scan . -f markdown-table
| Endpoint | Protocol | Params |
|---|---|---|
| GET / | http | x-api-key (header) |
| POST /query | http | my_auth (cookie) query (form) |
| GET /token | http | client_id (form) redirect_url (form) grant_type (form) |
| GET /socket | ws | |
| GET /1.html | http | |
| GET /2.html | http |
TOML
noir scan . -f toml
[[endpoints]]
callees = []
url = "/"
method = "GET"
internal = false
details = { code_paths = [{ path = "src/testapp.cr", line = 3 }], technology = "crystal_kemal" }
protocol = "http"
kind = ""
tags = []
params = [{ name = "x-api-key", value = "", param_type = "header", tags = [] }]
[[endpoints]]
callees = []
url = "/query"
method = "POST"
internal = false
details = { code_paths = [{ path = "src/testapp.cr", line = 17 }], technology = "crystal_kemal" }
protocol = "http"
kind = ""
tags = []
params = [{ name = "my_auth", value = "", param_type = "cookie", tags = [] }, { name = "query", value = "", param_type = "form", tags = [] }]
Configuration-style output that's easy to skim in a terminal or paste into a project config when you want to track endpoints alongside other declarative settings. The TOML serializer carries the full endpoint model (including --include callee and --ai-context fields when those flags are enabled), and is also the format used by --diff-path output when combined with -f toml.
JSON Lines (JSONL)
JSONL (-f jsonl) is covered together with JSON on the JSON and JSONL page.
Postman Collection
noir scan . -f postman -u https://api.example.com
Generates a Postman Collection v2.1 JSON file. Save the output and import it into Postman for interactive API testing.
{
"info": {
"name": "Generated by Noir",
"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
},
"item": [
{
"name": "GET api.example.com/",
"request": {
"method": "GET",
"header": [
{
"key": "x-api-key",
"value": ""
}
],
"url": {
"raw": "https://api.example.com/",
"host": ["api", "example", "com"],
"path": [],
"protocol": "https"
}
}
}
]
}