Get all risks

Returns all risks for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (cookies + X-Organization-Id header).

GET /v1/risks

Get all risks

cURL

curl --request GET \
  --url http://localhost:3333/v1/risks \
  --header 'X-API-Key: <api-key>'

200

{
  "data": [
    {
      "id": "rsk_abc123def456",
      "title": "Data breach vulnerability in user authentication system",
      "description": "Weak password requirements could lead to unauthorized access to user accounts",
      "category": "technology",
      "status": "open",
      "likelihood": "possible",
      "impact": "major",
      "treatmentStrategy": "mitigate",
      "assigneeId": "mem_abc123def456",
      "createdAt": "2023-11-07T05:31:56Z",
      "updatedAt": "2023-11-07T05:31:56Z"
    }
  ],
  "count": 15,
  "authType": "api-key",
  "authenticatedUser": {
    "id": "usr_def456ghi789",
    "email": "[e-mail]"
  }
}

Authorizations

X-API-Key · string · header · required

API key for authentication

Headers

X-Organization-Id · string

Organization ID (required for session auth, optional for API key auth)

Response

200

application/json

Risks retrieved successfully

data · object[]

Show child attributes

count · number

Total number of risks

Example:

15

authType · enum<string>

How the request was authenticated

Available options: api-key, session

authenticatedUser · object

User information (only for session auth)

Show child attributes