> ## Documentation Index > Fetch the complete documentation index at: https://www.docusnap.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Create or update several assets > Like `POST /asset`, for up to **100** assets in one call and one transaction. The response carries one result per bundle in `results`, in request order; match them through `idPair.fakeId`, i.e. the bundle's `id`. `isSuccess` of the overall response only says that the list was processed – whether each asset was saved is stated in `results[].isSuccess` and `failedCount`. Permission: *Read and Write*. ## OpenAPI ````yaml /api-reference/openapi.en.yaml post /asset/bulk openapi: 3.0.4 info: title: Docusnap365 REST API version: v1 description: | Public REST API of Docusnap365. Read access to a tenant's assets with filtering, sorting, cursor-based paging and loading of asset details (expands); write access through creating and updating assets. **Authentication.** API key in the `x-api-key` header. Owners and administrators create keys in Docusnap365 under *Administration › Integrations › API Keys*, with the access *Read* or *Read and Write*. Read endpoints require *Read*, write endpoints require *Read and Write*. **Visibility.** The key belongs to a user, and that user's rights apply. Only what the user's filters on organization, platform, domain and location allow is returned. Missing rights do not raise an error – they yield a smaller result set. Only **active** assets are returned; deleted, archived and hidden ones cannot be reached, not even through a filter on `status`. Assets of a deactivated type are not returned. **Quota.** Every request counts against the subscription's quota (*API & MCP requests*). With a limited quota every response carries the headers `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Extra-Remaining` and `X-RateLimit-Reset`; once it is used up, the API answers `429` with `Retry-After`. **Errors.** All errors come as `application/problem+json` with `errorCode`, `errors[]` and `traceId`. servers: - url: https://api.docusnap365.com/api/v1 description: Production security: - apiKey: [] tags: - name: Assets description: Read, query, create and update assets. paths: /asset/bulk: post: tags: - Assets summary: Create or update several assets description: | Like `POST /asset`, for up to **100** assets in one call and one transaction. The response carries one result per bundle in `results`, in request order; match them through `idPair.fakeId`, i.e. the bundle's `id`. `isSuccess` of the overall response only says that the list was processed – whether each asset was saved is stated in `results[].isSuccess` and `failedCount`. Permission: *Read and Write*. operationId: ingestAssetBulk requestBody: required: true content: application/json: schema: type: array maxItems: 100 items: $ref: '#/components/schemas/AssetBundle' example: - id: 11111111-1111-1111-1111-111111111111 schemaId: 00000000-0000-0000-0000-000000000000 object: name: SRV01 schemaId: 00000000-0000-0000-0000-000000000000 completenessLevel: 80 objectData: serialNumber: CZC811922L - id: 22222222-2222-2222-2222-222222222222 schemaId: 00000000-0000-0000-0000-000000000000 object: name: SRV02 schemaId: 00000000-0000-0000-0000-000000000000 completenessLevel: 80 objectData: serialNumber: CZC811923M responses: '200': description: List processed; one result per bundle in `results`. content: application/json: schema: $ref: '#/components/schemas/IngestBulkResult' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '429': $ref: '#/components/responses/TooManyRequests' '500': $ref: '#/components/responses/ServerError' '503': $ref: '#/components/responses/ServiceUnavailable' components: schemas: AssetBundle: type: object description: > An asset when creating or updating. The field names `object` and `objectData` are part of the interface. required: - schemaId properties: id: type: string format: uuid description: > Freely chosen identifier of the request. Not stored; it comes back as `idPair.fakeId`. One is generated if omitted. schemaId: type: string format: uuid description: Type of the asset. Required, even if `object.schemaId` is set. object: $ref: '#/components/schemas/AssetCore' objectData: type: object additionalProperties: true description: > The type's data, following its data definition. Replaced in full, not merged; left unchanged if omitted, `{}` empties it. essentials: $ref: '#/components/schemas/EssentialsBundle' facets: type: object additionalProperties: type: array items: type: object additionalProperties: true description: The asset's ITAM and ISMS data, one list per area. additionalProperties: false IngestBulkResult: type: object properties: results: type: array items: $ref: '#/components/schemas/IngestResult' description: One result per bundle, in request order. successCount: type: integer failedCount: type: integer isSuccess: type: boolean description: >- The list was processed. Whether each asset was saved is stated in `results[].isSuccess`. errorMessage: type: string nullable: true additionalProperties: true AssetCore: type: object description: An asset's core fields when writing. required: - name properties: id: type: string format: uuid description: ID of a known asset, to update exactly that one. schemaId: type: string format: uuid description: Type of the asset. parentId: type: string format: uuid name: type: string maxLength: 256 description: Required, also when updating; always applied. sourceType: type: string example: manual completenessLevel: type: integer format: int32 minimum: 0 maximum: 100 description: >- How complete the source is; protects more complete records. 0 if omitted. organizationId: type: string format: uuid locationId: type: string format: uuid platformId: type: string format: uuid domainId: type: string format: uuid status: type: string additionalProperties: true EssentialsBundle: type: object description: The asset's quick info. properties: sections: type: object additionalProperties: true description: Sections per kind (`quickinfo`, `statistics`). additionalProperties: false IngestResult: type: object description: Result for one bundle. properties: id: type: string format: uuid nullable: true description: ID of the asset. idPair: type: object properties: fakeId: type: string format: uuid description: The bundle's `id`. dbId: type: string format: uuid description: ID of the asset in Docusnap365. schemaId: type: string format: uuid isCreate: type: boolean description: '`true` if the asset was created.' isSuccess: type: boolean errorMessage: type: string nullable: true description: >- Reason if the asset was not saved – for example because a more complete record is protected. additionalProperties: true Problem: type: object description: Error according to RFC 9457. properties: type: type: string example: urn:ds365:error:unknown-path title: type: string example: Unknown field path status: type: integer example: 400 detail: type: string instance: type: string example: /api/v1/assets/query errorCode: type: string description: Meant for the application. example: UNKNOWN_PATH errors: type: array items: type: object properties: code: type: string path: type: string description: >- Location in the request, such as `filter`, `sort`, `select` or a parameter name. data: type: object additionalProperties: true traceId: type: string description: Quote it when contacting support. responses: BadRequest: description: > Invalid request – body unreadable, required field missing, unknown field (`UNKNOWN_PATH`), value does not fit the field (`FIELD_TYPE_MISMATCH`), operator does not fit (`UNSUPPORTED_OPERATOR`), `select`/`search` is not a JSON array (`INVALID_FORMAT`), unknown expand name (`VALIDATION_FAILED`), cursor damaged (`INVALID_CURSOR`) or expired (`CURSOR_EXPIRED`). content: application/problem+json: schema: $ref: '#/components/schemas/Problem' Unauthorized: description: The request could not be assigned to a user (`UNAUTHORIZED`). content: application/problem+json: schema: $ref: '#/components/schemas/Problem' Forbidden: description: > API key missing or without the required access (`FORBIDDEN`; `data.missingScopes` names what is missing) – or the cursor belongs to another user or tenant (`CURSOR_USER_MISMATCH`). content: application/problem+json: schema: $ref: '#/components/schemas/Problem' TooManyRequests: description: > Quota used up (`REST_REQUEST_QUOTA_EXCEEDED`); the request was not executed and still counted. headers: Retry-After: $ref: '#/components/headers/RetryAfter' X-RateLimit-Limit: $ref: '#/components/headers/RateLimitLimit' X-RateLimit-Remaining: $ref: '#/components/headers/RateLimitRemaining' X-RateLimit-Extra-Remaining: $ref: '#/components/headers/RateLimitExtraRemaining' X-RateLimit-Reset: $ref: '#/components/headers/RateLimitReset' content: application/problem+json: schema: $ref: '#/components/schemas/Problem' example: type: urn:ds365:error:rest-request-quota-exceeded title: Request quota exceeded status: 429 detail: >- The request quota of 10000 requests per period is exhausted until 2026-10-17T09:52:44.0000000+00:00. instance: /api/v1/assets errorCode: REST_REQUEST_QUOTA_EXCEEDED errors: - code: REST_REQUEST_QUOTA_EXCEEDED data: requestsLimit: 10000 requestsUsed: 10000 quotaResetAt: '2026-10-17T09:52:44+00:00' traceId: 00-… ServerError: description: >- Unexpected error (`INTERNAL_ERROR`). Quote the `traceId` when contacting support. content: application/problem+json: schema: $ref: '#/components/schemas/Problem' ServiceUnavailable: description: > The quota could not be checked (`SERVICE_UNAVAILABLE`); the request was not executed. Retry later. content: application/problem+json: schema: $ref: '#/components/schemas/Problem' headers: RetryAfter: description: Start of the next period as an HTTP date. schema: type: string RateLimitLimit: description: Requests included in the period. Absent without a limit. schema: type: integer RateLimitRemaining: description: Requests still available, included and purchased together. schema: type: integer RateLimitExtraRemaining: description: Of these, the purchased extra quota still available. schema: type: integer RateLimitReset: description: Start of the next period as a Unix timestamp (seconds). schema: type: integer securitySchemes: apiKey: type: apiKey in: header name: x-api-key description: > API key from Docusnap365 (*Administration › Integrations › API Keys*). Read endpoints require the access *Read*, write endpoints *Read and Write*. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.