Quickstart

This guide will help you make your first request to the STIG Viewer API.

1. Get Your API Token

Obtain an API token from SAMS. You will need this token to download STIG data.

1. Visit SAMS
2. Request API access for STIG Viewer
3. Receive your unique access token (e.g., ss_token_app_...)

2. Find a STIG Slug

You can find the "slug" (identifier) for a STIG either via the API or the web interface.

Option A: Use the API (requires your token)

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://www.stigviewer.com/api/v1/stigs

Option B: Browse the Web

Visit stigviewer.com/stigs and look at the URL for the STIG you want. Example: stigviewer.com/stigs/microsoft_windows_server_2022 -> slug is microsoft_windows_server_2022.

3. Make a Request

Use your token to download a STIG. Replace YOUR_TOKEN with your actual SAMS token.

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://www.stigviewer.com/api/v1/stigs/microsoft_windows_server_2022/download

By default this returns a DISA CKLB v1.0 checklist (.cklb) ready to import into STIG Viewer 3. Add ?format=json for the raw benchmark record instead, or ?format=csv / ?format=xml for flat exports.