POST /exams/import now takes an optional folder — the ID of the folder to drop the imported test into. Leave it out and the test lands at the top level, exactly as before.
The token needs editor access to that folder, otherwise the call returns a 404, and the folder is recorded in the import's audit log entry.