OneTrust

OneTrust Control Implementations API

APIs to handle control implementation operations including creation, updates, entity associations, attachment management, and comprehensive search across multiple entity types.

GitHub OpenAPI

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/controls/v1/control-implementation-attributes/search Search control implementation attributes · Search Control Implementation Attributes #
Ask an LLM
“Which attributes and options can a control implementation have?”
“Can I full-text search control implementation attributes?”
Tell an agent
Search control implementation attributes for {fullText}.
Find control implementation attributes matching filters {filters}.
POST /api/controls/v1/control-implementations/pages List control implementations · Get List of Control Implementations #
Ask an LLM
“What control implementations exist across all my frameworks?”
“Can I skip the total record count to speed up listing control implementations?”
Tell an agent
List all control implementations.
List control implementations matching {fullText}, page {page}.
GET /api/controls/v1/control-implementations/{guid} Get a control implementation · Get Control Implementation #
Ask an LLM
“What framework and category does a specific control implementation belong to?”
“Can I see all attributes of one control implementation?”
Tell an agent
Get control implementation {guid}.
Show attributes and framework of control implementation {guid}.
PUT /api/controls/v1/control-implementations/{guid} Update a control implementation · Update Control Implementation #
Ask an LLM
“Can I set a control implementation's status and effectiveness?”
“Is it possible to change owners and deadline on a control implementation?”
Tell an agent
Set control implementation {guid} to status {status}.
Update control implementation {guid}: status {status}, effectiveness {effectiveness}, deadline {deadline}.
DELETE /api/controls/v1/control-implementations/{guid} Delete a control implementation from an entity · Delete Control Implementation #
Ask an LLM
“Can I remove a control implementation from a vendor or asset?”
“Which entity ID is needed to delete a control implementation?”
Tell an agent destructive · confirm first
Delete control implementation {guid} from entity {entityId}.
Remove control {guid} from entity {entityId}.
POST /api/controls/v1/control-implementations/{guid}/attachments Attach files to a control implementation · Attach Files to Control Implementation #
Ask an LLM
“Can I attach evidence files to a control implementation?”
“Do files need to be uploaded before attaching them to a control?”
Tell an agent
Attach files {controlAttachmentRequests} to control implementation {guid}.
Add the uploaded documents {controlAttachmentRequests} to control {guid}.
POST /api/controls/v1/entities/{entityId}/control-implementations/pages List control implementations for an entity · Get List of Control Implementations by Entity #
Ask an LLM
“Which controls are implemented on a particular vendor, asset or risk?”
“Can I filter the controls attached to one processing activity?”
Tell an agent
List control implementations for entity {entityId}.
Show controls on entity {entityId} matching {fullText}.

Documentation

📖
Documentation
https://developer.onetrust.com/onetrust/reference/attribute-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/activity-log
📖
Documentation
https://developer.onetrust.com/onetrust/reference/preferences-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/banner
📖
Documentation
https://developer.onetrust.com/onetrust/reference/consent-receipts
📖
Documentation
https://developer.onetrust.com/onetrust/reference/applications
📖
Documentation
https://developer.onetrust.com/onetrust/reference/categorizations
📖
Documentation
https://developer.onetrust.com/onetrust/reference/domain-data
📖
Documentation
https://developer.onetrust.com/onetrust/reference/preferences
📖
Documentation
https://developer.onetrust.com/onetrust/reference/mobile-app-data
📖
Documentation
https://developer.onetrust.com/onetrust/reference/privacy-notice-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/collection-points
📖
Documentation
https://developer.onetrust.com/onetrust/reference/catalog-search-v1
📖
Documentation
https://developer.onetrust.com/onetrust/reference/classification
📖
Documentation
https://developer.onetrust.com/onetrust/reference/custom-scan
📖
Documentation
https://developer.onetrust.com/onetrust/reference/carbon-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/audit-records
📖
Documentation
https://developer.onetrust.com/onetrust/reference/bulk-export
📖
Documentation
https://developer.onetrust.com/onetrust/reference/attachments
📖
Documentation
https://developer.onetrust.com/onetrust/reference/system-credentials
📖
Documentation
https://developer.onetrust.com/onetrust/reference/inventory-relationships-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/model-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/tasks
📖
Documentation
https://developer.onetrust.com/onetrust/reference/groups-v2
📖
Documentation
https://developer.onetrust.com/onetrust/reference/assessment-actions
📖
Documentation
https://developer.onetrust.com/onetrust/reference/inventory
📖
Documentation
https://developer.onetrust.com/onetrust/reference/inventory-1
📖
Documentation
https://developer.onetrust.com/onetrust/reference/drop-management
📖
Documentation
https://developer.onetrust.com/onetrust/reference/incidents
📖
Documentation
https://developer.onetrust.com/onetrust/reference/document-controller
📖
Documentation
https://developer.onetrust.com/onetrust/reference/audits
📖
Documentation
https://developer.onetrust.com/onetrust/reference/initiatives
📖
Documentation
https://developer.onetrust.com/onetrust/reference/document-attachments
📖
Documentation
https://developer.onetrust.com/onetrust/reference/issues
📖
Documentation
https://developer.onetrust.com/onetrust/reference/control-implementations
📖
Documentation
https://developer.onetrust.com/onetrust/reference/training
📖
Documentation
https://developer.onetrust.com/onetrust/reference/contracts

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-control-implementations-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/onetrust:onetrust-control-implementations-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

onetrust-control-implementations-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Tech Risk & Compliance - IT Risk Management Control…
  description: The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security controls, threats, vulnerabilities, and their implementations with OAuth2 security and extensive customization capabilities.
  version: '1.0'
  contact:
    name: OneTrust Support
    url: https://my.onetrust.com/s/contactsupport
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: https://{hostname}
  variables:
    hostname:
      default: hostname
      description: The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com.
tags:


# --- truncated at 32 KB (77 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-control-implementations-api-openapi.yml