Skip to content

SRG detail with rules and metadata

GET
/srgs/{id}

Returns full SRG details including title, version, release date, severity counts, and all embedded rules with DISA metadata and check content. Requires authentication. Used by the SRG detail page (BenchmarkViewer).

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Responses

SRG detail with nested rules

application/json
JSON
{
  
"id": 1,
  
"srg_id": "Container_Platform_SRG",
  
"name": "Container Platform SRG - Ver 2, Rel 4",
  
"title": "Container Platform Security Requirements Guide",
  
"version": "V2R4",
  
"release_date": "2025-10-28",
  
"core": false,
  
"severity_counts": {
  
  
"high": 8,
  
  
"medium": 177,
  
  
"low": 3
  
},
  
"srg_rules": [
  
  
{
  
  
  
"id": 1,
  
  
  
"rule_id": "SV-233015r960759_rule",
  
  
  
"title": "The container platform must use TLS 1.2 or greater...",
  
  
  
"version": "SRG-APP-000014-CTR-000035",
  
  
  
"rule_severity": "medium"
  
  
}
  
]
}

Playground

Server
Authorization

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)