SOAP (Simple Object Access Protocol) is a messaging protocol for exchanging structured information in web services using XML over HTTP and other transport protocols. It provides built-in standards for security, transactions, and reliability, making it a common choice for enterprise integrations and legacy system communication.
SOAP
SOAP (Simple Object Access Protocol) is a W3C messaging protocol for exchanging structured information between services as XML envelopes, carried over HTTP, SMTP, and other transports. It grew up alongside WSDL and the broader WS-* stack to give enterprises a formal, contract-first way to describe and invoke operations across systems. Long before REST and OpenAPI became the default, SOAP was how much of the enterprise did integration, and a great deal of that infrastructure is still running.
- XML envelope - Every message is a strict XML document with a header and a body, parseable and validatable against a schema.
- Transport independence - Designed to ride over HTTP, SMTP, and message queues rather than being tied to a single protocol.
- WS-* extensions - Built-in seams for WS-Security, WS-ReliableMessaging, and transactions that enterprises leaned on for guarantees REST left to convention.
- WSDL contracts - A machine-readable description of every operation, its inputs, and outputs, that predates the OpenAPI era of API description.
In the work I do today, SOAP shows up mostly as legacy that has to be inventoried, governed, and often translated. I have spent real time turning WSDL into OpenAPI so older services can be discovered, tested, and secured with modern tooling. SOAP is a reminder that “the API economy” did not start with REST, and that any honest map of an organization’s estate still has to account for the XML-and-envelope integrations quietly holding critical systems together.
Referenced on the API Evangelist blog
Where this standard shows up across sixteen years of my writing at apievangelist.com — how it fits into API design, governance, and the agentic turn.
Didn’t We Already Do That?
2019-08-02
API Is Not Just REST
2018-02-03
Amazon Kills Alexa SOAP API Due To Security
2011-06-26
API Technology - SOAP
2011-02-08