OneTrust

OneTrust Incidents API

APIs used to create, update, search, and manage incidents, including linking incidents to inventories, retrieving details, and tracking their lifecycle.

Documentation GitHub OpenAPI

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /incident/v1/assignments/entities/{entityId}/stage Move an incident to its next workflow stage · Update Incident Stage #

Ask an LLM

“How do I advance a privacy incident to the next stage of its workflow?”

“Can I move an incident into a stage by the stage's name?”

Tell an agent

Move incident {entityId} to stage {nextStageName}.

Advance incident {entityId} to the {nextStageName} stage of its default workflow.

POST /incident/v1/assignments/entities/{entityId}/types/{type}/stage Move an incident's stage within a workflow type · Update Incident Stage by Type #

Ask an LLM

“How do I change an incident's stage in a specific workflow type rather than the default?”

“Can an incident be staged separately per workflow type?”

Tell an agent

Move incident {entityId} to stage {nextStageName} in its {type} workflow.

Set the {type} workflow stage of incident {entityId} to {nextStageName}.

POST /incident/v1/incidents Log a new incident in the Incident Register · Create Incident #

Ask an LLM

“How do I record a new data breach in the incident register?”

“Can I set when an incident occurred and was discovered as I log it?”

Tell an agent

Log incident {name} of type {incidentTypeName} for org group {orgGroupId}.

Create a {incidentTypeName} incident {name} in org group {orgGroupId}, discovered on {dateDiscovered}.

POST /incident/v1/incidents/search Search incidents by keyword and filters · Search Incidents #

Ask an LLM

“Which incidents mention a particular system or keyword?”

“Can I filter the incident register and sort the results?”

Tell an agent

Search incidents for {fullText}.

Find incidents matching filters {filters}, sorted by {sort}.

GET /incident/v1/incidents/{incidentId} Get an incident with its assessments and status · Get Incident #

Ask an LLM

“What is the current status of a given incident and which assessments are linked to it?”

“Can I see all the attributes recorded on one incident?”

Tell an agent

Show incident {incidentId}.

Get the linked assessments and status of incident {incidentId}.

PUT /incident/v1/incidents/{incidentId} Update an incident's details · Update Incident #

Ask an LLM

“How do I record the root cause on an incident after investigation?”

“Can I change an incident's deadline or jurisdictions later?”

Tell an agent

Update incident {incidentId}: name {name}, type {incidentTypeName}, org group {orgGroupId}.

Set the root cause of incident {incidentId} to {rootCause}.

POST /incident/v1/incidents/{incidentId}/inventory-links/{inventoryType} Link an incident to inventory records · Link Incident to Inventory #

Ask an LLM

“How do I record which assets were affected by an incident?”

“Can I link an incident to inventories by their external IDs?”

Tell an agent

Link incident {incidentId} to {inventoryType} inventories {inventoryIds}.

Attach {inventoryType} records with external IDs {externalIds} to incident {incidentId}.

OneTrust Incidents API

Operations 7

Documentation

Specifications

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification