--har

Write a HAR of the page’s network activity alongside another output. Takes a path:

zshot --output-type png --har page.har https://zshot-cli.com -f page.png

Capture response bodies with --har-capture-bodies. To emit a HAR as the primary output on its own, use --output-type har.

A HAR records every credential seen on the wire — session cookies, bearer tokens, and OAuth tokens the visited site issues, not only headers you pass. There is no redaction option. Treat the file as sensitive as the session itself. On the server it is auth-gated behind the same credentials as the render endpoint and expires per --server-additional-asset-expiration.

This is a Standard-tier flag.

On the HTTP server, request this as with_har=true instead of a path. The server writes the HAR to a temporary location and returns its URL in a Link response header. See the API reference for reading those links and --server-additional-asset-expiration for how long they live.