OneTrust

OneTrust Assessment Actions API

The Assessment Actions APIs are used to perform workflows on assessments, such as launching, approving, or creating tasks.

Documentation GitHub OpenAPI

Business capability

Privacy & Data Protection Management BC-130.50

Operations 13

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/assessment/v1/assessments/{assessmentId}/review Complete an assessment review with a result · Complete Assessment #

Ask an LLM

“Can I finish reviewing a submitted assessment and pick a result option?”

“What stage does an assessment move to once its review is completed?”

Tell an agent

Complete the review of assessment {assessmentId} with result {resultId}.

Close out review on assessment {assessmentId} with comment {closureComment}.

POST /api/assessment/v2/assessments Launch an assessment (v2 endpoint) · Launch Assessment #

Ask an LLM

“Can I still launch an assessment through the older v2 endpoint?”

“What fields does the v2 launch-assessment call require?”

Tell an agent

Using the v2 endpoint, launch assessment {name} for respondents {respondents}.

Launch a v2 assessment {name} from template {templateId} due {deadline} for {respondents}.

POST /api/assessment/v2/assessments/bulk Launch assessments in bulk per inventory · Launch Assessments in Bulk #

Ask an LLM

“Can I create one assessment for each inventory item in a single request?”

“Is there a bulk way to launch many assessments at once?”

Tell an agent

Launch assessments in bulk, one per inventory ID I give you.

Create a batch of assessments across my inventory records.

PUT /api/assessment/v2/assessments/{assessmentId}/reassign Reassign an assessment's people or org · Reassign Assessment #

Ask an LLM

“Can I change the respondents or approvers on an assessment already in flight?”

“Is it possible to move an assessment to a different organization?”

Tell an agent

Reassign assessment {assessmentId} to respondents {respondents}.

Move assessment {assessmentId} to organization {orgGroupId} with approvers {approvers}.

POST /api/assessment/v2/assessments/{assessmentId}/responses Submit answers to assessment questions · Submit Responses #

Ask an LLM

“Can I post question responses to an assessment programmatically?”

“Why can't I add responses to an assessment that is already completed?”

Tell an agent

Submit responses to the questions on assessment {assessmentId}.

Record my answers on assessment {assessmentId}.

POST /api/assessment/v2/assessments/{assessmentId}/risks Flag a risk on an assessment question · Create Assessment Risk #

Ask an LLM

“Can I raise a risk against a specific question on an assessment?”

“Who becomes the risk owner when a risk is flagged on an assessment?”

Tell an agent

Flag a risk on assessment {assessmentId} for question {questionId} in section {sectionId}.

Create risk {riskCreateRequest} on assessment {assessmentId} question {questionId}.

POST /api/assessment/v2/assessments/{assessmentId}/submit Submit an assessment for review · Submit Assessment #

Ask an LLM

“What must be answered before an assessment can be sent for review?”

“Can I accept the disclaimer when submitting an assessment?”

Tell an agent

Submit assessment {assessmentId} for review.

Send assessment {assessmentId} to Under Review with comment {comment}.

POST /api/assessment/v2/assessments/{assessmentId}/tasks Create a task on an assessment · Create Assessment Task #

Ask an LLM

“Can I add a follow-up task to an assessment and assign it to someone?”

“How many tasks can be created on an assessment per call?”

Tell an agent

Create task {taskName} on assessment {assessmentId}.

Add assessment task {taskName} to {assessmentId}, assigned to {assigneeId} due {deadline}.

POST /api/assessment/v2/assessments/{id}/reassess Launch a reassessment of an assessment · Reassess Assessment #

Ask an LLM

“Can I rerun an old assessment against the latest template version?”

“Does a reassessment carry over previous responses and attachments?”

Tell an agent

Reassess assessment {id}.

Launch a reassessment of {id} due {deadline}, copying responses {copyResponses}.

POST /api/assessment/v2/assessments/{id}/reopen Reopen a completed assessment · Reopen Assessment #

Ask an LLM

“Can a completed assessment be reopened to ask respondents for more information?”

“Which stage does a reopened assessment go back to?”

Tell an agent

Reopen completed assessment {id}.

Reopen assessment {id} and email respondents {emailComment}.

POST /api/assessment/v2/assessments/{id}/send-back Send an assessment back to in progress · Send Back Assessment #

Ask an LLM

“Can I send an assessment under review back to respondents for changes?”

“Is it possible to reset approver reviews when returning an assessment?”

Tell an agent

Send assessment {id} back to In Progress.

Return assessment {id} to respondents with note {emailComment}.

POST /api/assessment/v3/assessments Launch a new assessment · Launch Assessment #

Ask an LLM

“How do I launch a new privacy assessment and assign respondents?”

“Can a new assessment be tied to an inventory record and given a deadline?”

Tell an agent

Launch assessment {name} for respondents {respondents}.

Start assessment {name} from template {templateId} for {respondents}, due {deadline}.

POST /api/assessment/v3/assessments/{assessmentId}/approve Approve an assessment · Approve Assessment #

Ask an LLM

“Can I approve a submitted assessment and mark it completed?”

“Does an assessment have to be submitted before it can be approved?”

Tell an agent

Approve assessment {assessmentId}.

Approve assessment {assessmentId} with approval comment {closureComment}.

Documentation

https://developer.onetrust.com/onetrust/reference/attribute-management

https://developer.onetrust.com/onetrust/reference/activity-log

https://developer.onetrust.com/onetrust/reference/preferences-v2

https://developer.onetrust.com/onetrust/reference/banner

https://developer.onetrust.com/onetrust/reference/consent-receipts

https://developer.onetrust.com/onetrust/reference/applications

https://developer.onetrust.com/onetrust/reference/categorizations

https://developer.onetrust.com/onetrust/reference/domain-data

https://developer.onetrust.com/onetrust/reference/preferences

https://developer.onetrust.com/onetrust/reference/mobile-app-data

https://developer.onetrust.com/onetrust/reference/privacy-notice-v2

https://developer.onetrust.com/onetrust/reference/collection-points

https://developer.onetrust.com/onetrust/reference/catalog-search-v1

https://developer.onetrust.com/onetrust/reference/classification

https://developer.onetrust.com/onetrust/reference/custom-scan

https://developer.onetrust.com/onetrust/reference/carbon-management

https://developer.onetrust.com/onetrust/reference/audit-records

https://developer.onetrust.com/onetrust/reference/bulk-export

https://developer.onetrust.com/onetrust/reference/attachments

https://developer.onetrust.com/onetrust/reference/system-credentials

https://developer.onetrust.com/onetrust/reference/inventory-relationships-v2

https://developer.onetrust.com/onetrust/reference/model-management

https://developer.onetrust.com/onetrust/reference/tasks

https://developer.onetrust.com/onetrust/reference/groups-v2

https://developer.onetrust.com/onetrust/reference/assessment-actions

https://developer.onetrust.com/onetrust/reference/inventory

https://developer.onetrust.com/onetrust/reference/inventory-1

https://developer.onetrust.com/onetrust/reference/drop-management

https://developer.onetrust.com/onetrust/reference/incidents

https://developer.onetrust.com/onetrust/reference/document-controller

https://developer.onetrust.com/onetrust/reference/audits

https://developer.onetrust.com/onetrust/reference/initiatives

https://developer.onetrust.com/onetrust/reference/document-attachments

https://developer.onetrust.com/onetrust/reference/issues

https://developer.onetrust.com/onetrust/reference/control-implementations

https://developer.onetrust.com/onetrust/reference/training

https://developer.onetrust.com/onetrust/reference/contracts

Specifications

https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-assessment-actions-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/onetrust:onetrust-assessment-actions-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Privacy Automation - Assessment Automation Assessment…
  version: '1.0'
  contact:
    name: OneTrust Support
    url: https://my.onetrust.com/s/contactsupport
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  description: The Assessment Automation APIs provide functionality for managing assessment template lifecycle operations, including template export and import for cross-environment migration, retrieving published template metadata with filtering by template type, and template deletion with comprehensive validation checks.
servers:
- url: https://{hostname}
  variables:
    hostname:
      default: hostname
      description: The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com.
tags:


# --- truncated at 32 KB (133 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-assessment-actions-api-openapi.yml