Every API here is available over the APIs.io API and to AI agents over MCP.
openapi: 3.2.0
info:
title: Comp AI Findings API
description: Compliance automation API for SOC 2, ISO 27001, HIPAA, GDPR, evidence collection, policy workflows, Trust Access, security questionnaires, integrations, cloud checks, and device compliance.
version: '1.0'
contact: {}
servers:
- url: https://api.trycomp.ai
description: Production API Server
tags:
- name: Findings
description: Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
paths:
/v1/findings:
get:
operationId: FindingsController_listFindings_v1
parameters:
- name: status
required: false
in: query
schema:
enum:
- open
- ready_for_review
- needs_revision
- closed
type: string
- name: severity
required: false
in: query
schema:
enum:
- low
- medium
- high
- critical
type: string
- name: area
required: false
in: query
schema:
enum:
- people
- documents
- compliance
- risks
- vendors
- policies
- other
type: string
- name: taskId
required: false
in: query
schema:
type: string
- name: evidenceSubmissionId
required: false
in: query
schema:
type: string
- name: evidenceFormType
required: false
in: query
schema:
enum:
- board-meeting
- it-leadership-meeting
- risk-committee-meeting
- meeting
- access-request
- whistleblower-report
- penetration-test
- rbac-matrix
- infrastructure-inventory
- employee-performance-evaluation
- network-diagram
- tabletop-exercise
- account-types
type: string
- name: policyId
required: false
in: query
schema:
type: string
- name: vendorId
required: false
in: query
schema:
type: string
- name: riskId
required: false
in: query
schema:
type: string
- name: memberId
required: false
in: query
schema:
type: string
- name: deviceId
required: false
in: query
schema:
type: string
responses:
'200':
description: ''
security:
- apikey: []
summary: List audit findings
tags:
- Findings
description: List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.
x-mint:
metadata:
title: List audit findings | Comp AI API
sidebarTitle: List audit findings
description: List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.
og:title: List audit findings | Comp AI API
og:description: List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.
x-speakeasy-mcp:
name: list-findings
post:
operationId: FindingsController_createFinding_v1
parameters: []
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/CreateFindingDto'
responses:
'201':
description: ''
security:
- apikey: []
summary: Create audit finding
tags:
- Findings
description: Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.
x-mint:
metadata:
title: Create audit finding | Comp AI API
sidebarTitle: Create audit finding
description: Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.
og:title: Create audit finding | Comp AI API
og:description: Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.
x-speakeasy-mcp:
name: create-finding
/v1/findings/organization:
get:
operationId: FindingsController_getOrganizationFindings_v1
parameters:
- name: status
required: false
in: query
schema:
enum:
- open
- ready_for_review
- needs_revision
- closed
type: string
responses:
'200':
description: ''
security:
- apikey: []
summary: List all findings for the organization
tags:
- Findings
description: List all findings for the organization in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
x-mint:
metadata:
title: List all findings for the organization | Comp AI API
sidebarTitle: List all findings for the organization
description: List all findings for the organization in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an.
og:title: List all findings for the organization | Comp AI API
og:description: List all findings for the organization in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an.
x-speakeasy-mcp:
name: get-organization-findings
/v1/findings/{id}:
get:
operationId: FindingsController_getFindingById_v1
parameters:
- name: id
required: true
in: path
description: Finding ID
schema:
type: string
responses:
'200':
description: ''
security:
- apikey: []
summary: Get finding by ID
tags:
- Findings
description: Get finding by ID in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
x-mint:
metadata:
title: Get finding by ID | Comp AI API
sidebarTitle: Get finding by ID
description: Get finding by ID in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
og:title: Get finding by ID | Comp AI API
og:description: Get finding by ID in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
x-speakeasy-mcp:
name: get-finding-by-id
patch:
operationId: FindingsController_updateFinding_v1
parameters:
- name: id
required: true
in: path
description: Finding ID
schema:
type: string
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/UpdateFindingDto'
responses:
'200':
description: ''
security:
- apikey: []
summary: Update a finding (status transition rules apply)
tags:
- Findings
description: Update a finding (status transition rules apply) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
x-mint:
metadata:
title: Update a finding (status transition rules | Comp AI API
sidebarTitle: Update a finding (status transition rules apply)
description: Update a finding (status transition rules apply) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history.
og:title: Update a finding (status transition rules | Comp AI API
og:description: Update a finding (status transition rules apply) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history.
x-speakeasy-mcp:
name: update-finding
delete:
operationId: FindingsController_deleteFinding_v1
parameters:
- name: id
required: true
in: path
description: Finding ID
schema:
type: string
responses:
'200':
description: ''
security:
- apikey: []
summary: Delete a finding (auditor or platform admin only)
tags:
- Findings
description: Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
x-mint:
metadata:
title: Delete a finding (auditor or platform admin | Comp AI API
sidebarTitle: Delete a finding (auditor or platform admin only)
description: Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history.
og:title: Delete a finding (auditor or platform admin | Comp AI API
og:description: Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history.
x-speakeasy-mcp:
name: delete-finding
/v1/findings/{id}/history:
get:
operationId: FindingsController_getFindingHistory_v1
parameters:
- name: id
required: true
in: path
description: Finding ID
schema:
type: string
responses:
'200':
description: ''
security:
- apikey: []
summary: Get activity history for a finding
tags:
- Findings
description: Get activity history for a finding in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.
x-mint:
metadata:
title: Get activity history for a finding | Comp AI API
sidebarTitle: Get activity history for a finding
description: Get activity history for a finding in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an.
og:title: Get activity history for a finding | Comp AI API
og:description: Get activity history for a finding in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an.
x-speakeasy-mcp:
name: get-finding-history
components:
schemas:
UpdateFindingDto:
type: object
properties:
status:
type: string
description: Finding status
enum:
- open
- ready_for_review
- needs_revision
- closed
type:
type: string
description: Finding type
enum:
- soc2
- iso27001
- pci_dss
- hipaa
- gdpr
- iso9001
- iso42001
severity:
type: string
description: Severity
enum:
- low
- medium
- high
- critical
content:
type: string
description: Finding content/message
maxLength: 5000
revisionNote:
type:
- object
- 'null'
description: Auditor note when requesting revision
maxLength: 2000
CreateFindingDto:
type: object
properties:
taskId:
type: string
description: Task ID
evidenceSubmissionId:
type: string
description: Evidence submission ID
evidenceFormType:
type: string
description: Evidence form type
enum:
- board-meeting
- it-leadership-meeting
- risk-committee-meeting
- meeting
- access-request
- whistleblower-report
- penetration-test
- rbac-matrix
- infrastructure-inventory
- employee-performance-evaluation
- network-diagram
- tabletop-exercise
- account-types
policyId:
type: string
description: Policy ID
vendorId:
type: string
description: Vendor ID
riskId:
type: string
description: Risk ID
memberId:
type: string
description: Member ID (person this finding targets)
deviceId:
type: string
description: Device ID
area:
type: string
description: Broad area when the finding is not tied to a specific item
enum:
- people
- documents
- compliance
- risks
- vendors
- policies
- other
type:
type: string
description: Framework this finding is attributed to (must match a framework the organization has enabled)
enum:
- soc2
- iso27001
- pci_dss
- hipaa
- gdpr
- iso9001
- iso42001
default: soc2
severity:
type: string
description: Severity
enum:
- low
- medium
- high
- critical
default: medium
content:
type: string
description: Finding content/message
maxLength: 5000
required:
- type
- content
securitySchemes:
apikey:
type: apiKey
in: header
name: X-API-Key
description: API key for authentication
x-speakeasy-timeout: 120000