Create a campaign
POST/campaign
Saves a campaign in the caller's organization: an agent and a spec of the attacks to run against it. The target comes from the agent and the execution settings from the server, so the spec has no target or execution. The spec is validated as the SDK would (techniques, their parameters and roles, judges, dataset), and credentials must be ${VARIABLE} references to organization secrets. Nothing runs until the campaign is launched (POST /campaign/{id}/launch). 403 when the caller has no organization.
Request
Responses
- 201
- 400
- 401
- 403
- 429
Created
Validation error: the request is invalid and nothing was changed.
Missing, invalid, expired or revoked credential, or a credential this endpoint does not accept.
The credential may not do this (for example a run token outside its own run, or a caller without an organization), or the installation is read-only because its license is not valid (code: license_read_only).
Rate limited: retry after the number of seconds in the Retry-After header.