Upload an SRG XCCDF XML file
POST
/srgs
Parses and imports a DISA SRG from an XCCDF XML file. Requires admin role. Extracts all rules, CCIs, and metadata from the XML. Duplicate SRGs (same title + version) are rejected.
Authorizations
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Request Body
multipart/form-data
DISA XCCDF XML file (.xml) containing the SRG.
Format
"binary"Responses
SRG uploaded and parsed
application/json
JSON "toast": { "title": "SRG created.", "message": [ "Successfully created SRG." ], "variant": "success" }
{
}