---
title: "Get web objects"
method: GET
path: "/session/{sessionID}/web/objects"
---

# Get web objects

`GET /session/{sessionID}/web/objects`

Retrieve discovered data objects for web security testing.

## Path parameters

- `sessionID` string, required

## Query parameters

- `directory` string

## Response `200`

Object list

- WebObject[]
  - `id` string, required
  - `session_id` string, required
  - `name` string, required
  - `fields` string[]
  - `sensitive_fields` string[]
  - `id_fields` string[]
  - `discovered_from` string
  - `time` object, required
    - `created` number, required
    - `updated` number, required

## Other responses

- `400` — Bad request
- `404` — Not found

## Changes

- **2026-03-17** `437a6ea5aeb3` — 1 info
  - endpoint added
- **2026-01-20** `c7ae6a68e4fb` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/cyberstrikeus/apis/cyberstrike/changes/session/:sessionID/web/objects/get.md)

---

[API](https://skmtc.dev/cyberstrikeus/apis/cyberstrike.md) · [All operations](https://skmtc.dev/cyberstrikeus/apis/cyberstrike/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cyberstrikeus/cyberstrike/revisions/60718ff578c8/schema)