OneTrust

OneTrust Template API

APIs to manage assessment template operations including import and export functionality for cross-tenant migration, retrieval of published template listings with type-based filtering, and template deletion with dependency validation.

Documentation GitHub OpenAPI

Operations 4

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/template/v1/published-template-metadata List published assessment templates · Get List of Templates #

Ask an LLM

“Which assessment templates are published?”

“Can I list only vendor or PIA templates?”

Tell an agent

List all published templates.

List published templates of type {template-types}.

POST /api/template/v2/templates/import Import an assessment template · Import Template #

Ask an LLM

“How do I move a template from one tenant to another?”

“Can imported template attributes be matched by name?”

Tell an agent

Import the exported template, matching attributes by name: {matchAttributesByName}.

Load this template JSON into the tenant with name matching set to {matchAttributesByName}.

DELETE /api/template/v2/templates/root-version/{rootVersionId}/templates Delete an assessment template · Delete Template #

Ask an LLM

“Can I delete a template that is not used by any assessment?”

“Which template types can't be deleted?”

Tell an agent destructive · confirm first

Delete template with root version {rootVersionId}.

Remove every version of template {rootVersionId}.

GET /api/template/v2/templates/{templateId}/export Export an assessment template · Export Template #

Ask an LLM

“Can I export a template's questions and metadata as JSON?”

“Is it possible to export a specific template version?”

Tell an agent

Export template {templateId}.

Export version {templateVersion} of template {templateId}.

Documentation

https://developer.onetrust.com/onetrust/reference/attribute-management

https://developer.onetrust.com/onetrust/reference/activity-log

https://developer.onetrust.com/onetrust/reference/preferences-v2

https://developer.onetrust.com/onetrust/reference/banner

https://developer.onetrust.com/onetrust/reference/consent-receipts

https://developer.onetrust.com/onetrust/reference/applications

https://developer.onetrust.com/onetrust/reference/categorizations

https://developer.onetrust.com/onetrust/reference/domain-data

https://developer.onetrust.com/onetrust/reference/preferences

https://developer.onetrust.com/onetrust/reference/mobile-app-data

https://developer.onetrust.com/onetrust/reference/privacy-notice-v2

https://developer.onetrust.com/onetrust/reference/collection-points

https://developer.onetrust.com/onetrust/reference/catalog-search-v1

https://developer.onetrust.com/onetrust/reference/classification

https://developer.onetrust.com/onetrust/reference/custom-scan

https://developer.onetrust.com/onetrust/reference/carbon-management

https://developer.onetrust.com/onetrust/reference/audit-records

https://developer.onetrust.com/onetrust/reference/bulk-export

https://developer.onetrust.com/onetrust/reference/attachments

https://developer.onetrust.com/onetrust/reference/system-credentials

https://developer.onetrust.com/onetrust/reference/inventory-relationships-v2

https://developer.onetrust.com/onetrust/reference/model-management

https://developer.onetrust.com/onetrust/reference/tasks

https://developer.onetrust.com/onetrust/reference/groups-v2

https://developer.onetrust.com/onetrust/reference/assessment-actions

https://developer.onetrust.com/onetrust/reference/inventory

https://developer.onetrust.com/onetrust/reference/inventory-1

https://developer.onetrust.com/onetrust/reference/drop-management

https://developer.onetrust.com/onetrust/reference/incidents

https://developer.onetrust.com/onetrust/reference/document-controller

https://developer.onetrust.com/onetrust/reference/audits

https://developer.onetrust.com/onetrust/reference/initiatives

https://developer.onetrust.com/onetrust/reference/document-attachments

https://developer.onetrust.com/onetrust/reference/issues

https://developer.onetrust.com/onetrust/reference/control-implementations

https://developer.onetrust.com/onetrust/reference/training

https://developer.onetrust.com/onetrust/reference/contracts

Specifications

https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-template-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/onetrust:onetrust-template-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Privacy Automation - Assessment Automation Template API
  version: '1.0'
  contact:
    name: OneTrust Support
    url: https://my.onetrust.com/s/contactsupport
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  description: The Assessment Automation APIs provide functionality for managing assessment template lifecycle operations, including template export and import for cross-environment migration, retrieving published template metadata with filtering by template type, and template deletion with comprehensive validation checks.
servers:
- url: https://{hostname}
  variables:
    hostname:
      default: hostname
      description: The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com.
tags:
- name: Template
  description: APIs to manage assessment template operations including import and export functionality for cross-tenant migration, retrieval of published template listings with type-based filtering, and template deletion with dependency validation.
  externalDocs:
    description: OpenAPI 3.1.0 - Download Definition
    url: https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json
  x-displayName: Template
paths:
  /api/template/v1/published-template-metadata:
    get:
      operationId: getAllBasicTemplateDetailsUsingGET
      summary: Get List of Templates
      description: 'Use this API to retrieve the details of all the published templates. The response includes basic template details such as the template name, template root version ID, and template type.


        > 🗒 Things to Know

        >

        > - The following template types are available:

        >

        >

        >

        > Template Types

        >

        > CONTROL: Control templates created in IT & Security Risk Management

        >

        > DISCLOSURE: Disclosure Management

        >

        > ESG: ESG Program Reporting & Disclosures

        >

        > EXCHANGE: Third-Party Risk Exchange

        >

        > INCIDENT: Incident Management

        >

        > ITRM: IT & Security Risk Management

        >

        > PIA: PIA & DPIA Automation

        >

        > VENDOR: Third-Party Risk Management

        >

        >

        >

        > - If the template type is not specified in the API request body, all template types will be included in the response.'
      tags:
      - Template
      x-onetrust:
        spec-label: https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json
      parameters:
      - name: template-types
        in: query
        description: The array of template types to filter by when retrieving published templates.
        required: false
        schema:
          type: array
          items:
            type: string
            description: Template types to filter by. If not specified, all template types will be included.
            enum:
            - CONTROL
            - DISCLOSURE
            - ESG
            - EXCHANGE
            - INCIDENT
            - ITRM
            - PIA
            - VENDOR
            example:
            - CONTROL
            - ITRM
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Template_TemplateBasicDetailsDto'
        '400':
          description: Bad Request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview)."
          headers:
            Retry-After:
              schema:
                description: The number of seconds after which requests will be allowed again.
                format: int32
            ot-period:
              schema:
                description: The unit of time for which the rate limit applies
                enum:
                - HOUR
                - MINUTE
            ot-ratelimit-event-id:
              schema:
                description: The unique identifier for the rate-limiting event.
                format: uuid
            ot-request-made:
              schema:
                description: The number of requests made within the specified period.
                format: int32
            ot-requests-allowed:
              schema:
                description: The number of requests allowed within the specified period.
                format: int32
        '500':
          description: Internal Server Error
      security:
      - Template_OAUTH2:
        - INTEGRATION
        - ASSESSMENT_READ
        - ASSESSMENT
  /api/template/v2/templates/import:
    post:
      operationId: importTemplateByIdUsingPOST
      summary: Import Template
      description: 'Use this API to import the metadata of a specific template in JSON format in order to migrate the template from one environment/tenant to another environment/tenant. Before calling this API, use the Export Template API to obtain the template metadata in JSON format. The JSON response body obtained from the Export Template API can then be pasted within the Import Template request body (BODY PARAMS).


        > 🗒 Things to Know

        >

        > - After the import, the template will reflect on the Templates page in Draft status.

        >

        > - If a template with the same name already exists on the destination environment, then the migration will fail (HTTP Response Status Code 400: Duplicate template name). Please ensure that no templates (Active or Archived) already exist with the same name as the template being migrated.

        >

        > - If your template contains questions linked to custom inventory attributes, it is crucial that the same attributes have already been created in the destination environment/tenant and are an identical match.'
      tags:
      - Template
      x-onetrust:
        spec-label: https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json
      parameters:
      - name: matchAttributesByName
        in: query
        description: The flag indicating whether to match attributes by name during template import.
        required: true
        schema:
          description: If true, will match attributes by name during import
          type: boolean
          example: true
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              example: '{"template": {"id": "7d271be5-0601-4190-96a7-65d7c427a725", "name": "OnePIA", "status": "PUBLISHED" }'
              additionalProperties: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Template_TemplateCreateResponse'
        '400':
          description: Bad Request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview)."
          headers:
            Retry-After:
              schema:
                description: The number of seconds after which requests will be allowed again.
                format: int32
            ot-period:
              schema:
                description: The unit of time for which the rate limit applies
                enum:
                - HOUR
                - MINUTE
            ot-ratelimit-event-id:
              schema:
                description: The unique identifier for the rate-limiting event.
                format: uuid
            ot-request-made:
              schema:
                description: The number of requests made within the specified period.
                format: int32
            ot-requests-allowed:
              schema:
                description: The number of requests allowed within the specified period.
                format: int32
        '500':
          description: Internal Server Error
      security:
      - Template_OAUTH2:
        - INTEGRATION
        - ASSESSMENT
  /api/template/v2/templates/root-version/{rootVersionId}/templates:
    delete:
      operationId: deleteTemplateVersionsUsingDELETE
      summary: Delete Template
      description: 'The API can be used to delete a template using its root version identifier.


        > 🗒 Things to Know

        >

        > - The template should not be associated with any Assessment or any action rules of other templates.

        >

        > - Template of specific types PIA, VENDOR, ITRM, CONTROL, INCIDENT, EXCHANGE, ESG, DISCLOSURE, ERM, TPDD, DISCLOSURE_YOY can be deleted using the API.

        >

        > - The root version identifier of a template can be retrieved by calling the Get List of Templates API.'
      tags:
      - Template
      x-onetrust:
        spec-label: https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json
      parameters:
      - name: rootVersionId
        in: path
        description: The root version identifier of the template to be deleted.
        required: true
        schema:
          description: The UUID of the root version of the template to delete
          type: string
          format: uuid
          example: 7d271be5-0601-4190-96a7-65d7c427a725
      responses:
        '204':
          description: No Content
        '400':
          description: Bad Request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview)."
          headers:
            Retry-After:
              schema:
                description: The number of seconds after which requests will be allowed again.
                format: int32
            ot-period:
              schema:
                description: The unit of time for which the rate limit applies
                enum:
                - HOUR
                - MINUTE
            ot-ratelimit-event-id:
              schema:
                description: The unique identifier for the rate-limiting event.
                format: uuid
            ot-request-made:
              schema:
                description: The number of requests made within the specified period.
                format: int32
            ot-requests-allowed:
              schema:
                description: The number of requests allowed within the specified period.
                format: int32
        '500':
          description: Internal Server Error
      security:
      - Template_OAUTH2:
        - INTEGRATION
        - ASSESSMENT
  /api/template/v2/templates/{templateId}/export:
    get:
      operationId: exportTemplateWithBusinessKeysUsingGET
      summary: Export Template
      description: 'Use this API to export the metadata of a specific template in JSON format in order to migrate the template from one environment/tenant to another environment/tenant. The response body will be returned in JSON format and will include template details such as questions, rules, skip/show logic, etc.


        > 🗒 Things to Know

        >

        > - The JSON response body returned by this API can be pasted within the Import Template API''s request body to import the metadata of the template into the environment/tenant.

        > - The `templateRootVersionId` must be passed as the value for the `templateId` parameter if you are passing the `templateVersion` query parameter in the request.

        > - The response of this API will vary based on whether the `templateVersion` parameter is passed.

        > - If this parameter is not passed, then the template corresponding to the `templateId` will be exported.

        > - If a specific version value is passed for this parameter, then that version of the template will be exported.

        > - If `latest` is passed for this parameter, then the latest version of the template will be exported.'
      tags:
      - Template
      x-onetrust:
        spec-label: https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json
      parameters:
      - name: templateId
        in: path
        description: The unique identifier of the template to export.
        required: true
        schema:
          description: The UUID of the template to export
          type: string
          format: uuid
          example: 7d271be5-0601-4190-96a7-65d7c427a725
      - name: templateVersion
        in: query
        description: The specific version of the template to export or 'latest' for newest version.
        required: false
        schema:
          description: The version of the template to export. If not specified, exports the template corresponding to templateId. If 'latest' is passed, exports the latest version of the template.
          type: string
          example: latest
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                example:
                  template:
                    id: 7d271be5-0601-4190-96a7-65d7c427a725
                    name: OnePIA
                    status: PUBLISHED
                additionalProperties: true
        '400':
          description: Bad Request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: "Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview)."
          headers:
            Retry-After:
              schema:
                description: The number of seconds after which requests will be allowed again.
                format: int32
            ot-period:
              schema:
                description: The unit of time for which the rate limit applies
                enum:
                - HOUR
                - MINUTE
            ot-ratelimit-event-id:
              schema:
                description: The unique identifier for the rate-limiting event.
                format: uuid
            ot-request-made:
              schema:
                description: The number of requests made within the specified period.
                format: int32
            ot-requests-allowed:
              schema:
                description: The number of requests allowed within the specified period.
                format: int32
        '500':
          description: Internal Server Error
      security:
      - Template_OAUTH2:
        - INTEGRATION
        - ASSESSMENT_READ
        - ASSESSMENT
components:
  schemas:
    Template_TemplateBasicDetailsDto:
      type: object
      properties:
        name:
          description: The display name of the published template.
          type: string
          example: Sample Template
        rootVersionId:
          description: The root version identifier used for template management and operations.
          type: string
          format: uuid
          example: 7d271be5-0601-4190-96a7-65d7c427a725
        templateType:
          description: The classification type of the template indicating its purpose and module.
          type: string
          example: PIA
          default: PIA
          enum:
          - PIA
          - VENDOR
          - ITRM
          - CONTROL
          - ESG
          - TPDD
          - AIGOVERNANCE
    Template_TemplateCreateResponse:
      type: object
      properties:
        id:
          description: The unique identifier of the created template.
          type: string
          format: uuid
          example: 7d271be5-0601-4190-96a7-65d7c427a725
        rootVersionId:
          description: The root version identifier of the template used for version management.
          type: string
          format: uuid
          example: 7d271be5-0601-4190-96a7-65d7c427a725
        templateVersion:
          description: The version number of the template indicating its iteration.
          type: integer
          format: int32
          example: 1
        languageCode:
          description: The language code specifying the localization of the template.
          type: string
          example: en
  securitySchemes:
    PrivacyAutomation-AssessmentAutomation_OAUTH2:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: https://{hostname}/api/access/v1/oauth/token
          scopes:
            ASSESSMENT: Access to assessment scope for external systems
            ASSESSMENT_READ: Access to read assessment scope for external systems
    Template_OAUTH2:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: https://{hostname}/api/access/v1/oauth/token
          scopes:
            ASSESSMENT: Access to assessment scope for external systems
            ASSESSMENT_READ: Access to read assessment scope for external systems
x-readme:
  explorer-enabled: false
  proxy-enabled: false
  metrics-enabled: false
x-onetrust:
  spec-label: OpenAPI 3.1.0