OneTrust

OneTrust Audits API

APIs to manage the complete audit lifecycle including creation, updates, deletion, scope assignment, and retrieval with support for approvers, auditors, and custom attributes.

GitHub OpenAPI
Business capability
Internal Audit Management BC-140

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

DELETE /api/audit-management/v1/audit-scopes/{scopeId} Remove a control from an audit's scope · Delete Audit Scope #
Ask an LLM
“Can I take a control or control implementation out of an audit's scope?”
“Are findings deleted when a scope item is removed from an audit?”
Tell an agent destructive · confirm first
Delete audit scope {scopeId}.
Remove scope item {scopeId} from its audit and delete findings {deleteFinding}.
POST /api/audit-management/v1/audits Create an audit · Create Audit #
Ask an LLM
“What do I need to set up a new audit against a framework?”
“Can I assign auditors and approvers when creating an audit?”
Tell an agent
Create audit {header} on {framework} for {orgGroup}: auditors {auditors}, approvers {approvers}, source {auditSourceType}, scopes {scopes}.
Start a new audit with header {header} against {framework}.
POST /api/audit-management/v1/audits/pages Search and list audits · Get List of Audits #
Ask an LLM
“Which audits are currently set up, and who are the auditors on each?”
“Can I search audits by keyword and filters?”
Tell an agent
List all audits.
Search audits for {fullText}.
GET /api/audit-management/v1/audits/{auditId} Get an audit · Get Audit #
Ask an LLM
“Can I pull up a single audit by its ID?”
“Where do I see one audit's full details?”
Tell an agent
Get audit {auditId}.
Show details for audit {auditId}.
PUT /api/audit-management/v1/audits/{auditId} Update an audit's auditors and approvers · Update Audit #
Ask an LLM
“Can I change the auditors or approvers on an existing audit?”
“Is it possible to edit an audit's attributes after creation?”
Tell an agent
Update audit {auditId} auditors to {auditors}, approvers to {approvers}, header {header}, assignment {auditorAssignmentType}.
Change the approvers on audit {auditId} to {approvers}.
DELETE /api/audit-management/v1/audits/{auditId} Delete an audit · Delete Audit #
Ask an LLM
“Is deleting an audit permanent, and what goes with it?”
“Can I keep the findings when an audit is deleted?”
Tell an agent destructive · confirm first
Delete audit {auditId}.
Permanently delete audit {auditId}, deleting findings {deleteFinding}.
PUT /api/audit-management/v1/audits/{auditId}/reassign-scopes Update an audit's scope · Update Audit Scope #
Ask an LLM
“Can I change which controls are in scope for an existing audit?”
“Is there a way to reassign scopes on an audit?”
Tell an agent
Update the scope of audit {auditId}.
Reassign the in-scope controls on audit {auditId}.

Documentation

📖
Documentation
https://developer.onetrust.com/onetrust/reference/attribute-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/activity-log
📖
Documentation
https://developer.onetrust.com/onetrust/reference/preferences-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/banner
📖
Documentation
https://developer.onetrust.com/onetrust/reference/consent-receipts
📖
Documentation
https://developer.onetrust.com/onetrust/reference/applications
📖
Documentation
https://developer.onetrust.com/onetrust/reference/categorizations
📖
Documentation
https://developer.onetrust.com/onetrust/reference/domain-data
📖
Documentation
https://developer.onetrust.com/onetrust/reference/preferences
📖
Documentation
https://developer.onetrust.com/onetrust/reference/mobile-app-data
📖
Documentation
https://developer.onetrust.com/onetrust/reference/privacy-notice-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/collection-points
📖
Documentation
https://developer.onetrust.com/onetrust/reference/catalog-search-v1
📖
Documentation
https://developer.onetrust.com/onetrust/reference/classification
📖
Documentation
https://developer.onetrust.com/onetrust/reference/custom-scan
📖
Documentation
https://developer.onetrust.com/onetrust/reference/carbon-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/audit-records
📖
Documentation
https://developer.onetrust.com/onetrust/reference/bulk-export
📖
Documentation
https://developer.onetrust.com/onetrust/reference/attachments
📖
Documentation
https://developer.onetrust.com/onetrust/reference/system-credentials
📖
Documentation
https://developer.onetrust.com/onetrust/reference/inventory-relationships-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/model-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/tasks
📖
Documentation
https://developer.onetrust.com/onetrust/reference/groups-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/assessment-actions
📖
Documentation
https://developer.onetrust.com/onetrust/reference/inventory
📖
Documentation
https://developer.onetrust.com/onetrust/reference/inventory-1
📖
Documentation
https://developer.onetrust.com/onetrust/reference/drop-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/incidents
📖
Documentation
https://developer.onetrust.com/onetrust/reference/document-controller
📖
Documentation
https://developer.onetrust.com/onetrust/reference/audits
📖
Documentation
https://developer.onetrust.com/onetrust/reference/initiatives
📖
Documentation
https://developer.onetrust.com/onetrust/reference/document-attachments
📖
Documentation
https://developer.onetrust.com/onetrust/reference/issues
📖
Documentation
https://developer.onetrust.com/onetrust/reference/control-implementations
📖
Documentation
https://developer.onetrust.com/onetrust/reference/training
📖
Documentation
https://developer.onetrust.com/onetrust/reference/contracts

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-audits-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/onetrust:onetrust-audits-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

onetrust-audits-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Tech Risk & Compliance - Audit Management Audits API
  description: The Audit Management API provides comprehensive REST endpoints for managing enterprise audits, workpapers, and compliance assessments with OAuth2 security and advanced filtering capabilities.
  version: '1.0'
  contact:
    name: OneTrust Support
    url: https://my.onetrust.com/s/contactsupport
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: https://{hostname}
  variables:
    hostname:
      default: hostname
      description: The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com.
tags:


# --- truncated at 32 KB (37 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-audits-api-openapi.yml