Recorded Future

Recorded Future Mastercard Riskrecon API

RiskRecon provides organizations with frequent, comprehensive, actionable visibility into the security quality of their business partners. RiskRecon does this by automatically measuring the security performance of any enterprise across security domains and criteria, providing visibility into security programs. All of the security discovery and analytics are based on public information with no inside access required. The RiskRecon service requires an account with RiskRecon.

GitHub OpenAPI
Business capability
Supplier Risk Management BC-510.30

Operations 44

GET /v1/action_plan/findings/{toe_id} This resource returns a list of finding details from an action plan of a TOE. #
GET /v1/action_plan/issue_progress/{toe_id} This resource tracks and reports a vendors progress in addressing action plan issues. #
GET /v1/action_plan/issue_summary/{toe_id} This resource returns a vendor's action plan issue summary. #
GET /v1/action_plan/priority_matrix_counts/{toe_id} This API returns the count of current action plan issues per their severity and priority. #
GET /v1/action_plan/vendor_status_summary_counts/{toe_id} This API returns the vendor status summary counts of a given action plan. #
GET /v1/action_plan/{toe_id} This resource returns action plan configurations both automated and manual for a given TOE. #
POST /v1/action_plan/{toe_id} This resource sends action plan email to recipients of a TOE. #
GET /v1/alerting/issues This resource returns Alerting Issues from new scans in their portfolio based on the users alert settings. #
GET /v1/alerting/rating_changes This resource returns any rating/score changes from new scans in the users portfolio based on the users alert settings. #
GET /v1/analysis/current/{toe_id} :: Legacy Route Please use getToeRatings :: This resource returns the most recent `Analysis` object by the TOE identifier. Trend data is only included if `include_trend` query para #
GET /v1/analysis/history/{toe_id} :: Legacy Route Please use getToeRatings :: This resource returns a collection of historical `Analysis` objects by the TOE identifier. #
GET /v1/compliance/controls/{toe_id} This resource returns risk standard controls associated with a TOE id and a particular custom or industry standard. #
GET /v1/compliance/{toe_id} This resource returns an list of custom and industry standards. #
GET /v1/data_loss_events/{toe_id} :: Legacy Route :: This resource returns a collection of `DataLossEvent` objects. #
GET /v1/display_names/security_criteria This resource returns a mapping of security_criteria labels and their current display names in the RiskRecon portal. #
GET /v1/display_names/security_domain This resource returns a mapping of security_domain labels and their current display names in the RiskRecon portal. #
GET /v1/findings/{toe_id} :: Legacy Route :: This resource returns a list of findings for latest analysis for a given TOE. #
GET /v1/findings_paginated/{toe_id} This resource returns a list of findings for latest analysis for a given TOE. #
GET /v1/hosts/{toe_id} This resource returns a list of Hosts for latest analysis for a given TOE. #
GET /v1/integration/routes/{toe_id} The Integration Routes API provides a list of URLs for the security domains within the Security Profile section of the RiskRecon Portal. #
GET /v1/integration/routes/{toe_id}/details The Integration Routes Details API provides a list of URLs for the detailed views within each security domain in the Security Profile and its corresponding risk_dimensions section #
POST /v1/portfolio/bulk_add This endpoint is for requesting to add new TOEs (targets of evaluation) to your portfolio. #
GET /v1/portfolio/risk_relationships_folders This resource gets the customer's risk relationship folders names and slugs. #
GET /v1/portfolio/subscription_level_config This resource returns the default subscription_level for bulk toe requests for your customer. #
PUT /v1/portfolio/subscription_level_config This resource sets the default subscription_level for bulk toe requests for your customer. #
GET /v1/portfolio_data_loss_events This resource returns a collection of `BreachEvent` objects. #
GET /v1/privacy/portfolio_enforcement_actions This resource returns a collection of `EnforcementAction` objects. #
GET /v1/reports/portfolio_ratings Get portfolio ratings report #
GET /v1/subsidiaries/toe_id/{toe_id} This route returns a collection of `Subsidiary` objects associated with a toe. #
POST /v1/toe/{toe_id} This endpoint adds an existing TOE to the users portfolio. #
DELETE /v1/toe/{toe_id} This endpoint deletes an existing TOE to the users portfolio. #
GET /v1/toe/{toe_id} This resource gets a `TOE` object by its identifier. #
PUT /v1/toe/{toe_id} This endpoint allows a user to update the internal_ids and/or internal_name of an existing `TOE` by its identifier. #
POST /v1/toe_reports This resource allows the ordering and downloading of toe reports #
GET /v1/toe_reports This resource returns the list of active report request. #
GET /v1/toe_reports/{request_id} This resource returns the PDF report. #
GET /v1/toes This resource returns a collection of `TOE` objects mapped to a customer. #
GET /v1/toes/by_cve This endpoint allows the user to search for Company name, TOE ID by a valid CVE. #
GET /v1/toes/by_domains This endpoint allows the user to search for a TOE by a valid domain or hostname. #
PUT /v1/toes/risk_relationships This endpoint moves an existing TOE from one risk relationship folder to another #
GET /v1/toes/{toe_id}/ratings Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension. #
POST /v1/toes/{toe_id}/subscriptions This endpoint adds and updates subscription licenses for a TOE. #
GET /v1/toes_paginated This resource returns a collection of `TOE` objects mapped to a customer. #
GET /v1/user_mgmt The User route is used to get all the user data for one’s organization. #

Documentation

📖
APIReference
https://docs.recordedfuture.com/reference

Specifications

⚙
OpenAPI
Mastercard Riskrecon API OpenAPI

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/recorded-future:mastercard-riskrecon"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

recorded-future-mastercard-riskrecon-api-openapi.yml Raw ↑ 
openapi: 3.0.3
info:
  title: Mastercard Riskrecon API
  version: '1.0'
  description: 'RiskRecon provides organizations with frequent, comprehensive, actionable visibility into the security quality of their business partners.  RiskRecon does this by automatically measuring the security performance of any enterprise across security domains and criteria, providing visibility into security programs.


    All of the security discovery and analytics are based on public information with no inside access required.  The RiskRecon service requires an account with RiskRecon.'
  contact:
    name: API Support
    email: support@riskrecon.com
    url: https://riskrecon.zendesk.com/hc/en-us
servers:
- url: https://api.sandbox.riskrecon.com
  description: Sandbox server
- url: https://api.riskrecon.com
  description: Production server
security:


# --- truncated at 32 KB (174 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-mastercard-riskrecon-api-openapi.yml