comp API

AI

• POSTEngage in AI chat

Assistant Chat

• GETGet assistant chat history
• PUTSave assistant chat history
• DELETEClear assistant chat history

Attachments

• GETGet attachment download URL

Auth

• GETHandle invitation link redirection
• GETTest database connection (E2E only)
• POSTPerform a test login for E2E (Internal Only)

Browserbase

• POSTGet or create organization browser context
• GETGet organization browser context status
• POSTCreate a new browser session
• POSTClose a browser session
• POSTNavigate to a URL
• POSTCheck authentication status
• POSTCreate a browser automation
• GETGet all browser automations for a task
• GETGet a browser automation by ID
• PATCHUpdate a browser automation
• DELETEDelete a browser automation
• POSTStart automation with live view
• POSTExecute automation on existing session
• POSTRun a browser automation
• GETGet run history for an automation
• GETGet a specific run by ID

Cloud Tests

• GETRetrieve cloud test findings for an organization.
• GETRetrieve active cloud providers for an organization.

Comments

• GETGet comments for an entity
• POSTCreate a new comment
• PUTUpdate a comment
• DELETEDelete a comment

Connections

• GETList all available integration providers
• GETGet a specific provider's details
• GETList connections for an organization
• GETGet a specific connection
• POSTCreate a new connection with API key credentials
• POSTTest a connection's credentials
• POSTPause a connection
• POSTResume a paused connection
• POSTDisconnect (soft delete) a connection
• DELETEDelete a connection permanently
• PATCHUpdate connection metadata (connectionName, regions, etc.)
• POSTGet valid credentials for a connection, refreshing OAuth tokens if needed.
• PUTUpdate credentials for a custom auth connection

Context

• GETGet all context entries
• GETGet context entry by ID
• POSTCreate a new context entry
• PATCHUpdate a context entry
• DELETEDelete a context entry

Device Agent

• GETDownload macOS device agent
• GETDownload Windows device agent
• GETRetrieve device agent status
• GETDownload a device agent installer
• HEADGet metadata for a device agent installer
• POSTCreate a one-time download token for a device agent

Devices

• GETGet all devices
• GETGet devices by member ID

Endpoints

• GETRedirect to Swagger documentation
• POSTCreate :ConnectionId
• POSTCreate :ConnectionId
• GETGet :RunId
• GETList all integrations with their credential status
• GETGet details for a specific integration
• POSTSave platform credentials for an integration
• DELETEDelete platform credentials for an integration
• GETList available checks for a provider
• GETList available checks for a connection
• POSTRun checks for a connection
• POSTRun a specific check for a connection

Evidence Export

• GETGet task evidence summary
• GETExport automation evidence as PDF
• GETExport task evidence as ZIP

Evidence Export (Auditor)

• GETExport all organization evidence as ZIP (Auditor only)

Evidence Forms

• GETList evidence forms
• GETGet submission statuses for all forms
• GETGet current user submissions
• GETGet pending submission count for current user
• GETGet form definition and submissions
• GETGet a single submission
• POSTSubmit evidence form entry
• PATCHReview a submission
• POSTUpload evidence form file
• GETExport form submissions to CSV
• POSTAnalyze evidence form submissions using AI.

File Management

• GETGet a signed URL for an image stored in S3.

Finding Templates

• GETGet all finding templates
• GETGet finding template by ID
• POSTCreate a finding template
• PATCHUpdate a finding template
• DELETEDelete a finding template

Findings

• GETGet findings for a task
• GETGet all findings for organization
• GETGet finding by ID
• POSTCreate a finding
• PATCHUpdate a finding
• DELETEDelete a finding
• GETGet finding history

Fleet Policies

• POSTConfirms a fleet policy and uploads attachments.

Framework Editor Task Templates

• GETGet all task templates
• GETGet task template by ID
• PATCHUpdate a task template
• DELETEDelete a task template

Health

• GETHealth check

Integration Sync

• POSTSync employees from Google Workspace
• POSTCheck if Google Workspace is connected for an organization
• POSTSync employees from Rippling
• POSTCheck if Rippling is connected for an organization
• POSTSync employees from Ramp
• POSTSync employees from JumpCloud
• POSTCheck if JumpCloud is connected for an organization
• POSTCheck if Ramp is connected for an organization
• GETGet the current employee sync provider for an organization
• POSTSet the employee sync provider for an organization

Integration Variables

• GETGet all variables required for a provider's checks
• GETGet variables for a specific connection (with current values)
• GETFetch dynamic options for a variable (requires active connection)
• POSTSave variable values for a connection

Integrations

• GETList custom OAuth apps for an organization
• GETGet OAuth app setup info for a provider
• POSTSave custom OAuth app credentials for an organization
• DELETEDelete custom OAuth app credentials for an organization
• GETCheck if OAuth credentials are available for a provider
• POSTStart OAuth flow - returns authorization URL
• GETOAuth callback - exchanges code for tokens

Internal Tasks

• POSTSend task status change notifications (email + in-app) without a user actor (internal)
• POSTSend automation failure notifications (email + in-app) when one or more automations fail (internal)

Internal Vendors

• POSTTrigger vendor risk assessment tasks for a batch of vendors (internal)
• POSTTrigger vendor risk assessment for a single vendor and return run info (internal)

Knowledge Base

• GETList all knowledge base documents for an organization
• POSTUpload a knowledge base document
• POSTGet a signed download URL for a knowledge base document
• POSTGet a signed view URL for a knowledge base document
• POSTDelete a knowledge base document
• POSTTrigger processing of knowledge base documents
• POSTCreate a public access token for a Trigger.dev run
• POSTDelete a manual answer
• POSTDelete all manual answers for an organization

Org Chart

• GETGet the organization chart
• PUTCreate or update an interactive organization chart
• POSTUpload an image as the organization chart
• DELETEDelete the organization chart

Organization

• GETGet organization details
• PATCHUpdate organization details
• POSTTransfer organization ownership
• DELETEDelete an organization
• GETGet organization primary color

People

• GETGet all people for an organization
• POSTCreate a new person (member)
• POSTBulk create people (members)
• GETGet a person (member) by ID
• PATCHUpdate a person (member)
• DELETERemove a host from a person (member)
• DELETEDelete a person (member)
• PATCHUnlink a device from a person (member)

Policies

• GETGet all policies for an organization
• GETDownload all published policies as a single PDF
• GETGet a policy by ID
• POSTCreate a new policy
• PATCHUpdate a policy
• DELETEDelete a policy
• GETGet all versions for a policy
• GETGet a policy version by ID
• POSTCreate a new policy version
• PATCHUpdate policy version content
• DELETEDelete a policy version
• POSTPublish a policy version
• POSTSet a policy version as active
• POSTSubmit a policy version for approval
• POSTChat with AI about a policy

QA Internal

• POSTApprove an organization by setting hasAccess to true (QA internal).
• POSTDelete a user and all associated data (QA internal).

Questionnaire

• POSTParse questionnaire content
• POSTGenerated single answer result
• POSTSave manual or generated answer
• POSTDelete questionnaire answer
• POSTExport questionnaire by ID to specified format
• POSTUpload file, parse questions (no answers), save to DB, return questionnaireId
• POSTUpload file, parse questions (no answers), save to DB, return questionnaireId
• POSTCreate Upload
• POSTCreate Token
• POSTCreate Export
• POSTCreate Upload
• POSTCreate Auto Answer

Retool Internal

• POSTResets an organization's data

Risks

• GETGet all risks for an organization
• GETGet a risk by its ID
• POSTCreate a new risk
• PATCHUpdate an existing risk
• DELETEDelete a risk

Secrets

• GETGet a specific secret
• PUTUpdate a secret
• DELETEDelete a secret
• GETList all secrets for the organization
• POSTCreate a new secret

SOA

• POSTSave a SOA answer
• POSTAuto-fill SOA document
• POSTCreate a new SOA document
• POSTEnsure SOA configuration and document exist
• POSTApprove a SOA document
• POSTDecline a SOA document
• POSTSubmit SOA document for approval

Task Automations

• GETGet all automations for a task
• GETGet automation details
• POSTCreate a new automation
• PATCHUpdate an automation
• DELETEDelete an automation
• GETGet all versions for an automation
• GETGet all automation runs for a task

Task Integrations

• GETGet all integration checks that can auto-complete a specific task template
• GETGet integration checks for a specific task (by task ID)
• POSTRun a specific check for a task and store results
• GETGet check run history for a task

Task Management

• GETGet task items statistics for an entity
• GETGet task items for an entity
• POSTCreate a new task item
• PUTUpdate a task item
• DELETEDelete a task item
• POSTUpload attachment to task item
• DELETEDelete attachment from task item
• GETGet task item activity log

Tasks

• GETGet all tasks
• PATCHUpdate status for multiple tasks
• PATCHUpdate assignee for multiple tasks
• POSTBulk submit tasks for review
• DELETEDelete multiple tasks
• GETGet task by ID
• GETGet task activity
• PATCHUpdate a task
• POSTSubmit task for review
• POSTApprove a task
• POSTReject a task review
• GETGet task attachments
• POSTUpload attachment to task
• GETGet attachment download URL
• DELETEDelete task attachment

Training

• POSTSend training completion email with certificate
• POSTGenerate training completion certificate PDF

Trust Access

• POSTSubmit data access request
• GETList access requests
• GETGet access request details
• POSTApprove access request
• POSTDeny access request
• GETList access grants
• POSTRevoke access grant
• POSTResend access granted email
• GETGet NDA details by token
• POSTPreview NDA by token
• POSTSign NDA
• POSTResend NDA email
• POSTPreview NDA PDF
• POSTReclaim access
• GETGet grant data by access token
• GETList policies by access token
• GETDownload all policies as watermarked PDF
• GETDownload all policies as ZIP with individual PDFs
• GETList compliance resources by access token
• GETList additional documents by access token
• GETDownload all additional documents as a ZIP by access token
• GETDownload additional document by access token
• GETDownload compliance resource by access token
• GETGet FAQs for a trust portal
• GETGet overview section for a trust portal
• GETGet custom links for a trust portal
• GETGet favicon URL for a trust portal
• GETGet vendors/subprocessors for a trust portal

Trust Portal

• GETGet domain verification status
• POSTUpload or replace a compliance certificate (PDF only)
• POSTGenerate a temporary signed URL for a compliance certificate
• POSTList uploaded compliance certificates for the organization
• POSTUpload an additional trust portal document
• POSTList additional trust portal documents for the organization
• POSTGenerate a temporary signed URL for a trust portal document
• POSTDelete (deactivate) a trust portal document
• POSTUpdate trust portal overview section
• GETGet trust portal overview
• POSTCreate a custom link for trust portal
• POSTUpdate a custom link
• POSTDelete a custom link
• POSTReorder custom links
• GETList custom links for trust portal
• POSTUpdate vendor trust portal settings
• GETList vendors configured for trust portal

User Data

• GETRetrieve user frameworks

Vendors

• GETGet all vendors for an organization
• GETGet a vendor by ID
• POSTCreate a new vendor
• PATCHUpdate an existing vendor
• DELETEDelete a vendor

Webhooks

• POSTHandle incoming webhooks for a specific provider and connection

MCPllms.txtllms-full.txtHelp