Upload a STIG XCCDF XML file
POST
/stigs
Parses and imports a published STIG from an XCCDF XML file. Requires admin role. Extracts all rules, CCIs, and metadata. Duplicate STIGs (same title + version) are rejected.
Authorizations
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Request Body
multipart/form-data
DISA XCCDF XML file (.xml) containing the STIG.
Format
"binary"Responses
STIG uploaded and parsed
application/json
JSON "toast": { "title": "STIG added.", "message": [ "Successfully added Application Security and Development Security Technical Implementation Guide." ], "variant": "success" }
{
}