OneTrust

OneTrust Risks API

APIs to manage the complete risk lifecycle including creation, updates, deletion, search, and retrieval of risk details and attributes.

Documentation GitHub OpenAPI

Business capability

Risk Identification & Assessment BC-120.20

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/risk/v2/entities/risks/unlink Unlink risks from an entity · Unlink Risks #

Ask an LLM

“How do I detach risks from an asset or vendor without deleting them?”

“Can I disassociate several risks from one entity at once?”

Tell an agent

Unlink risks {riskIds} from the entity described by {riskSourceInformation}.

Disassociate risk {riskIds} from its target entity {riskSourceInformation}.

GET /api/risk/v2/risk-categories List risk categories · Get List of Risk Categories #

Ask an LLM

“What risk categories are configured in my risk register?”

“Where do I find the category IDs to tag a risk with?”

Tell an agent

List all risk categories with their IDs and descriptions.

Show me the available risk categories.

GET /api/risk/v2/risk-settings/matrix Get the risk matrix scoring configuration · Get Risk Matrix Configuration #

Ask an LLM

“How are impact and probability combined into a score in my risk matrix?”

“What impact and probability levels does the risk matrix define?”

Tell an agent

Show the risk score matrix configuration.

Get the impact and probability levels from the risk matrix settings.

GET /api/risk/v2/risk-settings/standard Get the standard risk level configuration · Get Standard Risk Configuration #

Ask an LLM

“What score ranges define low, medium and high risk under the standard configuration?”

“Which risk levels exist in the standard scoring setup?”

Tell an agent

Show the standard risk levels with their minimum and maximum scores.

Get the standard risk score configuration.

POST /api/risk/v2/risks Create a risk tied to an inventory (v2) · Create Risk #

Ask an LLM

“How do I log a new risk against an asset in the risk register?”

“Can I set impact and probability levels when creating a risk on an inventory?”

Tell an agent

Create a v2 risk of type {type} from source {source} on inventory {associatedInventory} for org group {orgGroupId}.

Log risk {name} against inventory {associatedInventory} (type {type}, source {source}, org group {orgGroupId}) with deadline {deadline}.

POST /api/risk/v2/risks/pages Search and list risks in the register · Get List of Risks #

Ask an LLM

“Which risks in my register match a keyword?”

“Can I filter and sort the full risk register list?”

Tell an agent

Search the risk register for {fullTextSearch}.

List risks matching filters {filters}, sorted by {sort}.

POST /api/risk/v2/risks/{riskEntityType}/{entityId}/risks List risks linked to a specific entity · Get List of Linked Risks #

Ask an LLM

“What risks are attached to a particular vendor or asset?”

“Can I include risks from child inventories when listing an entity's risks?”

Tell an agent

List the risks linked to {riskEntityType} {entityId}.

Show risks on {riskEntityType} {entityId} including child inventory risks.

GET /api/risk/v2/risks/{riskId} Get a single risk's details · Get Risk #

Ask an LLM

“Who owns and approves a particular risk, and what is its status?”

“What does the full record of one risk contain?”

Tell an agent

Show risk {riskId}.

Tell me the owners, approvers and status of risk {riskId}.

POST /api/risk/v3/risks Create a standalone risk (v3) · Create Risk #

Ask an LLM

“How do I create a risk that is not tied to an inventory record?”

“Can I set inherent and residual risk levels on a new v3 risk?”

Tell an agent

Create a standalone v3 risk {name} for org group {orgGroupId}.

Add a v3 risk in org group {orgGroupId} with inherent level {inherentRiskLevel} and treatment plan {treatmentPlan}.

Documentation

https://developer.onetrust.com/onetrust/reference/attribute-management

https://developer.onetrust.com/onetrust/reference/activity-log

https://developer.onetrust.com/onetrust/reference/preferences-v2

https://developer.onetrust.com/onetrust/reference/banner

https://developer.onetrust.com/onetrust/reference/consent-receipts

https://developer.onetrust.com/onetrust/reference/applications

https://developer.onetrust.com/onetrust/reference/categorizations

https://developer.onetrust.com/onetrust/reference/domain-data

https://developer.onetrust.com/onetrust/reference/preferences

https://developer.onetrust.com/onetrust/reference/mobile-app-data

https://developer.onetrust.com/onetrust/reference/privacy-notice-v2

https://developer.onetrust.com/onetrust/reference/collection-points

https://developer.onetrust.com/onetrust/reference/catalog-search-v1

https://developer.onetrust.com/onetrust/reference/classification

https://developer.onetrust.com/onetrust/reference/custom-scan

https://developer.onetrust.com/onetrust/reference/carbon-management

https://developer.onetrust.com/onetrust/reference/audit-records

https://developer.onetrust.com/onetrust/reference/bulk-export

https://developer.onetrust.com/onetrust/reference/attachments

https://developer.onetrust.com/onetrust/reference/system-credentials

https://developer.onetrust.com/onetrust/reference/inventory-relationships-v2

https://developer.onetrust.com/onetrust/reference/model-management

https://developer.onetrust.com/onetrust/reference/tasks

https://developer.onetrust.com/onetrust/reference/groups-v2

https://developer.onetrust.com/onetrust/reference/assessment-actions

https://developer.onetrust.com/onetrust/reference/inventory

https://developer.onetrust.com/onetrust/reference/inventory-1

https://developer.onetrust.com/onetrust/reference/drop-management

https://developer.onetrust.com/onetrust/reference/incidents

https://developer.onetrust.com/onetrust/reference/document-controller

https://developer.onetrust.com/onetrust/reference/audits

https://developer.onetrust.com/onetrust/reference/initiatives

https://developer.onetrust.com/onetrust/reference/document-attachments

https://developer.onetrust.com/onetrust/reference/issues

https://developer.onetrust.com/onetrust/reference/control-implementations

https://developer.onetrust.com/onetrust/reference/training

https://developer.onetrust.com/onetrust/reference/contracts

Specifications

https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-risks-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/onetrust:onetrust-risks-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Tech Risk & Compliance - IT Risk Management Risks API
  description: The IT Risk Management API provides comprehensive REST endpoints for managing enterprise security controls, threats, vulnerabilities, and their implementations with OAuth2 security and extensive customization capabilities.
  version: '1.0'
  contact:
    name: OneTrust Support
    url: https://my.onetrust.com/s/contactsupport
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: https://{hostname}
  variables:
    hostname:
      default: hostname
      description: The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com.
tags:


# --- truncated at 32 KB (72 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-risks-api-openapi.yml