Appearance
List uploaded Security Requirements Guides
GET
/srgs
Returns all uploaded SRGs sorted by title. Requires authentication. SRGs are the DISA baseline requirement documents that Components implement. Each SRG contains the rules that Component authors map their controls to.
Authorizations
cookieAuth
Type
API Key (cookie: _vulcan_session)
or
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Responses
All SRGs
application/json
JSON { "id": 1, "srg_id": "Container_Platform_SRG", "name": "Container Platform SRG - Ver 2, Rel 4", "title": "Container Platform Security Requirements Guide", "version": "V2R4", "release_date": "2025-10-28", "core": false, "severity_counts": { "high": 8, "medium": 177, "low": 3 } }, { "id": 2, "srg_id": "General_Purpose_Operating_System_SRG", "name": "General Purpose Operating System - Ver 3, Rel 3", "title": "General Purpose Operating System SRG", "version": "V3R3", "release_date": "2025-06-15", "core": false, "severity_counts": { "high": 15, "medium": 150, "low": 8 } }
[
]