Overview
API collections help ApyGuard understand the endpoints, request patterns, and structure of the APIs you want to assess.Supported inputs
ApyGuard works best when you provide a current API definition such as:- OpenAPI 3.x
- Swagger 2.0
- Postman collections
Import flow
- Open the API collection import flow from the relevant asset.
- Choose the source format.
- Upload the file or provide the import source.
- Review the imported endpoints.
- Save the collection and verify that the expected API surface is present.

Best practices
- Keep your specification current with backend changes
- Separate collections by environment when needed
- Review imported endpoints before scanning
- Re-import when your API changes materially
Next steps
Authentication Setup
Configure access for protected endpoints in the imported collection.
Security Scanning
Use the imported collection in a scan workflow.
