# Recorded Future Mastercard Riskrecon API

**Canonical:** https://apis.io/apis/recorded-future/mastercard-riskrecon/  
**Provider:** Recorded Future — https://apis.io/providers/recorded-future/  
**Base URL:** https://api.sandbox.riskrecon.com  
**Documentation:** https://docs.recordedfuture.com/reference/riskrecon-v1/llms.txt

Recorded Future Mastercard Riskrecon API is one of 25 APIs that [Recorded Future](https://apis.io/providers/recorded-future/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Threat Intelligence and Cybersecurity. The published artifact set on APIs.io includes an OpenAPI specification and an API reference.

RiskRecon provides organizations with frequent, comprehensive, actionable visibility into the security quality of their business partners. RiskRecon does this by automatically measuring the security performance of any enterprise across security domains and criteria, providing visibility into security programs. All of the security discovery and analytics are based on public information with no inside access required. The RiskRecon service requires an account with RiskRecon.

## Operations (44)

| Method | Path | Summary |
|---|---|---|
| GET | `/v1/action_plan/findings/{toe_id}` | This resource returns a list of finding details from an action plan of a TOE. |
| GET | `/v1/action_plan/issue_progress/{toe_id}` | This resource tracks and reports a vendors progress in addressing action plan issues. |
| GET | `/v1/action_plan/issue_summary/{toe_id}` | This resource returns a vendor's action plan issue summary. |
| GET | `/v1/action_plan/priority_matrix_counts/{toe_id}` | This API returns the count of current action plan issues per their severity and priority. |
| GET | `/v1/action_plan/vendor_status_summary_counts/{toe_id}` | This API returns the vendor status summary counts of a given action plan. |
| GET | `/v1/action_plan/{toe_id}` | This resource returns action plan configurations both automated and manual for a given TOE. |
| POST | `/v1/action_plan/{toe_id}` | This resource sends action plan email to recipients of a TOE. |
| GET | `/v1/alerting/issues` | This resource returns Alerting Issues from new scans in their portfolio based on the users alert settings. |
| GET | `/v1/alerting/rating_changes` | This resource returns any rating/score changes from new scans in the users portfolio based on the users alert settings. |
| GET | `/v1/analysis/current/{toe_id}` | :: Legacy Route Please use getToeRatings :: This resource returns the most recent `Analysis` object by the TOE identifier. Trend data is only included if `in... |
| GET | `/v1/analysis/history/{toe_id}` | :: Legacy Route Please use getToeRatings :: This resource returns a collection of historical `Analysis` objects by the TOE identifier. |
| GET | `/v1/compliance/controls/{toe_id}` | This resource returns risk standard controls associated with a TOE id and a particular custom or industry standard. |
| GET | `/v1/compliance/{toe_id}` | This resource returns an list of custom and industry standards. |
| GET | `/v1/data_loss_events/{toe_id}` | :: Legacy Route :: This resource returns a collection of `DataLossEvent` objects. |
| GET | `/v1/display_names/security_criteria` | This resource returns a mapping of security_criteria labels and their current display names in the RiskRecon portal. |
| GET | `/v1/display_names/security_domain` | This resource returns a mapping of security_domain labels and their current display names in the RiskRecon portal. |
| GET | `/v1/findings/{toe_id}` | :: Legacy Route :: This resource returns a list of findings for latest analysis for a given TOE. |
| GET | `/v1/findings_paginated/{toe_id}` | This resource returns a list of findings for latest analysis for a given TOE. |
| GET | `/v1/hosts/{toe_id}` | This resource returns a list of Hosts for latest analysis for a given TOE. |
| GET | `/v1/integration/routes/{toe_id}` | The Integration Routes API provides a list of URLs for the security domains within the Security Profile section of the RiskRecon Portal. |
| GET | `/v1/integration/routes/{toe_id}/details` | The Integration Routes Details API provides a list of URLs for the detailed views within each security domain in the Security Profile and its corresponding r... |
| POST | `/v1/portfolio/bulk_add` | This endpoint is for requesting to add new TOEs (targets of evaluation) to your portfolio. |
| GET | `/v1/portfolio/risk_relationships_folders` | This resource gets the customer's risk relationship folders names and slugs. |
| GET | `/v1/portfolio/subscription_level_config` | This resource returns the default subscription_level for bulk toe requests for your customer. |
| PUT | `/v1/portfolio/subscription_level_config` | This resource sets the default subscription_level for bulk toe requests for your customer. |
| GET | `/v1/portfolio_data_loss_events` | This resource returns a collection of `BreachEvent` objects. |
| GET | `/v1/privacy/portfolio_enforcement_actions` | This resource returns a collection of `EnforcementAction` objects. |
| GET | `/v1/reports/portfolio_ratings` | Get portfolio ratings report |
| GET | `/v1/subsidiaries/toe_id/{toe_id}` | This route returns a collection of `Subsidiary` objects associated with a toe. |
| POST | `/v1/toe/{toe_id}` | This endpoint adds an existing TOE to the users portfolio. |
| DELETE | `/v1/toe/{toe_id}` | This endpoint deletes an existing TOE to the users portfolio. |
| GET | `/v1/toe/{toe_id}` | This resource gets a `TOE` object by its identifier. |
| PUT | `/v1/toe/{toe_id}` | This endpoint allows a user to update the internal_ids and/or internal_name of an existing `TOE` by its identifier. |
| POST | `/v1/toe_reports` | This resource allows the ordering and downloading of toe reports |
| GET | `/v1/toe_reports` | This resource returns the list of active report request. |
| GET | `/v1/toe_reports/{request_id}` | This resource returns the PDF report. |
| GET | `/v1/toes` | This resource returns a collection of `TOE` objects mapped to a customer. |
| GET | `/v1/toes/by_cve` | This endpoint allows the user to search for Company name, TOE ID by a valid CVE. |
| GET | `/v1/toes/by_domains` | This endpoint allows the user to search for a TOE by a valid domain or hostname. |
| PUT | `/v1/toes/risk_relationships` | This endpoint moves an existing TOE from one risk relationship folder to another |
| GET | `/v1/toes/{toe_id}/ratings` | Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension. |
| POST | `/v1/toes/{toe_id}/subscriptions` | This endpoint adds and updates subscription licenses for a TOE. |
| GET | `/v1/toes_paginated` | This resource returns a collection of `TOE` objects mapped to a customer. |
| GET | `/v1/user_mgmt` | The User route is used to get all the user data for one’s organization. |

## Machine-readable artifacts (2)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-mastercard-riskrecon-api-openapi.yml
- **APIReference** — https://docs.recordedfuture.com/reference

## Other Recorded Future APIs (12)

- [Recorded Future Intelligence Cloud API](https://apis.io/apis/recorded-future/recorded-future-connect-api/)
- [Recorded Future Alert API](https://apis.io/apis/recorded-future/alert/)
- [Recorded Future Analyst Note API](https://apis.io/apis/recorded-future/analyst-note/)
- [Recorded Future ASI Project API](https://apis.io/apis/recorded-future/asi-project/)
- [Recorded Future Autonomous Threat Operations API](https://apis.io/apis/recorded-future/autonomous-threat-operations/)
- [Recorded Future Case](https://apis.io/apis/recorded-future/case/)
- [Recorded Future Collective Insights API](https://apis.io/apis/recorded-future/collective-insights/)
- [Recorded Future Common Platform Enumeration APIs V0](https://apis.io/apis/recorded-future/common-platform-enumeration-apis-v0/)
- [Recorded Future Customer APIs V0](https://apis.io/apis/recorded-future/customer-apis-v0/)
- [Recorded Future Customer APIs V2](https://apis.io/apis/recorded-future/customer-apis-v2/)
- [Recorded Future Detection Rule API](https://apis.io/apis/recorded-future/detection-rule/)
- [Recorded Future Detection Rule Relation API](https://apis.io/apis/recorded-future/detection-rule-relation/)

## Tags

Threat Intelligence, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/recorded-future/mastercard-riskrecon/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/recorded-future/.