API - Get Firmware Version

That is not possible, as far as i know. 

SNMP or a CLI Login Script would be the way to go. 

what would a CLI login script look like? We'd really like to do this.

what would a CLI login script look like? We'd really like to do this.

Most CLI programs can work with the "expect" function. https://hostadvice.com/how-to/how-to-automate-tasks-in-ssh/

So you can use the login to CLI via SSH (SSH key preferable). 

Then you use the output, which gets back to you and "expect" your way through CLI (advanced shell). 

See: https://community.sophos.com/xg-firewall/f/discussions/74332/how-to-schedule-a-script-crontab/340083#340083

XG also present directly: Sophos Firmware Version SFOS 18.0.3 MR-3

So you can actually use this output print as a variable and paste it into your desired format.