Currently I've only been able to attach the data (url encoded) in the URL string. This means that we can only insert 5 records at at a time, rather than the 100 promised by the API documents. The URL limit is usually around the 2000 character limit, which is quickly used up by the verbose XML format.