Get all risks

Returns all risks for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (cookies + X-Organization-Id header).

GET /v1/risks

Try it

Get all risks

cURL

curl --request GET \
  --url http://localhost:3333/v1/risks \
  --header 'X-API-Key: <api-key>'

200

{
  "data": [
    {
      "id": "rsk_abc123def456",
      "title": "Data breach vulnerability in user authentication system",
      "description": "Weak password requirements could lead to unauthorized access to user accounts",
      "category": "technology",
      "status": "open",
      "likelihood": "possible",
      "impact": "major",
      "treatmentStrategy": "mitigate",
      "assigneeId": "mem_abc123def456",
      "createdAt": "2023-11-07T05:31:56Z",
      "updatedAt": "2023-11-07T05:31:56Z"
    }
  ],
  "count": 15,
  "authType": "api-key",
  "authenticatedUser": {
    "id": "usr_def456ghi789",
    "email": "[e-mail]"
  }
}

Authorizations

X-API-Key · string · header · required

API key for authentication

Headers

X-Organization-Id · string

Organization ID (required for session auth, optional for API key auth)

Response

200

application/json

Risks retrieved successfully

data · object[]

Show child attributes

data. id · string

Risk ID

Example:

"rsk_abc123def456"

data. title · string

Risk title

Example:

"Data breach vulnerability in user authentication system"

data. description · string

Risk description

Example:

"Weak password requirements could lead to unauthorized access to user accounts"

data. category · enum<string>

Available options: customer, governance, operations, other, people, regulatory, reporting, resilience, technology, vendor_management

Example:

"technology"

data. status · enum<string>

Available options: open, pending, closed, archived

Example:

"open"

data. likelihood · enum<string>

Available options: very_unlikely, unlikely, possible, likely, very_likely

Example:

"possible"

data. impact · enum<string>

Available options: insignificant, minor, moderate, major, severe

Example:

"major"

data. treatmentStrategy · enum<string>

Available options: accept, avoid, mitigate, transfer

Example:

"mitigate"

data. assigneeId · string | null

ID of the user assigned to this risk

Example:

"mem_abc123def456"

data. createdAt · string<date-time>

When the risk was created

data. updatedAt · string<date-time>

When the risk was last updated

count · number

Total number of risks

Example:

15

authType · enum<string>

How the request was authenticated

Available options: api-key, session

authenticatedUser · object

User information (only for session auth)

Show child attributes

authenticatedUser. id · string

Example:

"usr_def456ghi789"

authenticatedUser. email · string

Example:

"[e-mail]"