SOAP (Simple Object Access Protocol) is a messaging protocol for exchanging structured information in web services using XML over HTTP and other transport protocols. It provides built-in standards for security, transactions, and reliability, making it a common choice for enterprise integrations and legacy system communication.
SOAP
SOAP (Simple Object Access Protocol) is a W3C messaging protocol for exchanging structured information between services as XML envelopes, carried over HTTP, SMTP, and other transports. It grew up alongside WSDL and the broader WS-* stack to give enterprises a formal, contract-first way to describe and invoke operations across systems. Long before REST and OpenAPI became the default, SOAP was how much of the enterprise did integration, and a great deal of that infrastructure is still running.
- XML envelope - Every message is a strict XML document with a header and a body, parseable and validatable against a schema.
- Transport independence - Designed to ride over HTTP, SMTP, and message queues rather than being tied to a single protocol.
- WS-* extensions - Built-in seams for WS-Security, WS-ReliableMessaging, and transactions that enterprises leaned on for guarantees REST left to convention.
- WSDL contracts - A machine-readable description of every operation, its inputs, and outputs, that predates the OpenAPI era of API description.
In the work I do today, SOAP shows up mostly as legacy that has to be inventoried, governed, and often translated. I have spent real time turning WSDL into OpenAPI so older services can be discovered, tested, and secured with modern tooling. SOAP is a reminder that “the API economy” did not start with REST, and that any honest map of an organization’s estate still has to account for the XML-and-envelope integrations quietly holding critical systems together.
Practices this standard realizes
The ways of working this standard exists to serve. A standard rarely arrives on its own — it is usually the artifact some practice needed before it could be more than an argument.
Service Oriented Architecture
The messaging protocol most SOA implementations actually spoke.
Referenced on the API Evangelist blog
Where this standard shows up across sixteen years of my writing at apievangelist.com — how it fits into API design, governance, and the agentic turn.
Didn’t We Already Do That?
2019-08-02
API Is Not Just REST
2018-02-03
Amazon Kills Alexa SOAP API Due To Security
2011-06-26
API Technology - SOAP
2011-02-08