OneTrust

OneTrust Controls API

APIs to manage the complete control lifecycle including creation, updates, deletion, retrieval, and entity type management with framework integration and custom attributes.

Documentation GitHub OpenAPI

Business capability

Security Strategy & Governance Management BC-620.10

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/controls/v1/controls Create a control · Create Control #

Ask an LLM

“How do I add a new control to the Controls Library?”

“Can I assign a framework and category to a control when I create it?”

Tell an agent

Create control {identifier} named {name} in org {orgGroupId} with origin {origin}.

Add control {identifier} {name} under framework {frameworkName} for org {orgGroupId}, origin {origin}.

POST /api/controls/v1/controls/pages Search controls · Get List of Controls #

Ask an LLM

“What controls are in my Controls Library?”

“Can I search controls by keyword and see their framework and category?”

Tell an agent

List all controls in the library.

Search controls for {fullText}.

PUT /api/controls/v1/controls/{controlId} Update a control · Update Control #

Ask an LLM

“How do I change a control's description or implementation guidance?”

“Can I move an existing control to a different category?”

Tell an agent

Update control {controlId} with identifier {identifier}, name {name}, org {orgGroupId}.

Set implementation guidance on control {controlId} to {implementationGuidance}.

DELETE /api/controls/v1/controls/{controlId} Delete a control · Delete Control #

Ask an LLM

“How do I remove a control from the Controls Library?”

“Can I delete a control by its ID?”

Tell an agent destructive · confirm first

Delete control {controlId}.

Remove control {controlId} from the library.

GET /api/controls/v2/control-entity-types List control entity source types · Get List of Control Entity Source Types #

Ask an LLM

“Which entity source types can controls be attached to?”

“What control entity source types are enabled?”

Tell an agent

List all control entity source types.

Show the enabled source types for controls.

GET /api/controls/v2/related/control-entity-types List related control entity types · Get Related Control Entity Types #

Ask an LLM

“What entity types can be related to controls?”

“Which related entity types does the controls module support?”

Tell an agent

List the related control entity types.

Show which entity types can be linked as related to controls.

OneTrust Controls API

Operations 6

Documentation

Specifications

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification