API basics

This guide describes the official Dradis Pro API. If you have any problems or requests, please contact the support team.

Jump to: Current version | Schema | HTTP Verbs | Parameters | Authentication | Error codes | Endpoint cheatsheet

Current Version

By default, all requests receive the v3 version of the API, as of v4.10 of Dradis. We encourage you to explicitly request this version via the Accept header.

Accept: application/vnd.dradisapi; v=3

Schema

All API access is over HTTPS, and accessed through dradis-pro.dev/pro/api. All data is sent and received as JSON.

Blank fields are included as null instead of being omitted.

All timestamps are returned in ISO 8601 format:

HTTP Verbs

Where possible, the API strives to use appropriate HTTP verbs for each action.

• HEAD: Can be issued against any resource to get just the HTTP header info.
• GET: Used for retrieving resources.
• POST: Used for creating resources
• PUT: Used for updating resources with partial JSON data. A PUT request may accept one or more of the attributes to update the resource.
• DELETE: Used for deleting resources.

Parameters

For POST, PATCH, PUT, and DELETE requests, parameters should be encoded as JSON with a Content-Type of application/json:

$ curl \
  -H 'Authorization: Token token="xMsNwttqN5bVNEYcrIF01s65"' \
  -H 'Content-type: application/json' \
  -d '{"team":{"name":"Test Client 4"}}' \
  https://dradis-pro.dev/pro/api/teams

Authentication

The API supports two different authentication modes: API token and HTTP Basic.

API token

Provide your token as part of the HTTP Authorization header:

Authorization: Token token="<API_token>"

Note that the header requires you to use double-quotes (").

For example:

$ curl \
  -H 'Authorization: Token token="xMsNwttqN5bVNEYcrIF01s65"' \
  https://dradis-pro.dev/pro/api/projects/1

1. In the header, click the avatar icon in the top right corner and then select Profile from the dropdown that appears.
   
2. Scroll down below Confirm password to find your API token:
   

Basic Authentication

Use the same credentials you log in with:

$ curl -u 'your@email.com' https://dradis-pro.dev/pro/api/projects/1
Enter host password for user 'your@email.com':

Error codes

These are the possible types of errors on API calls. The response will include a JSON object with the description and the proper HTTP status code:

Endpoints Cheatsheet

Check out the following pages for more details on each of the available endpoints: