Export risks as CSV

POST

/v1/risks/export

• Production
• Staging
• Local

Request Body

One of:

null

null

object

object

columns

Optional list of column keys to include, in order. If None, exports all columns.

array | null

Allowed values: id title description status likelihood impact urgency source type created_date updated_date discovered_date due_date expected_date closed_date assigned_to opened_by initially_reported_urgency remediation_task control_statement likelihood_reasoning impact_reasoning threat_objectives tags

filename

Optional custom filename (without .csv extension)

string | null

filter

One of:

null

null

object

RSK filter applied in “All in filter” mode. Honored only when meta_risk_type == OrgRisk and selected_risks is empty. AKR exports always export every AKR (there is only ever one page of them in practice), so this field is ignored when meta_risk_type == KeyRisk. Pagination on the filter is overridden by the streaming defaults.

object

assigned_to

Accepts UUIDs, the literal null (unassigned), and the sentinel me (the calling user, resolved server-side). Multiple values union — e.g. assigned_to=me&assigned_to=<uuid> returns rows assigned to either.

array | null

unique items

closed_after

Inclusive lower bound on closed_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

closed_before

Inclusive upper bound on closed_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

closed_is_null

Match only risks whose closed_date is unset. Mutually exclusive with closed_after/closed_before.

boolean | null

created_after

Inclusive lower bound on created_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

created_before

Inclusive upper bound on created_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

description_contains

string | null

discovered_after

Inclusive lower bound on discovered_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

discovered_before

Inclusive upper bound on discovered_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

due_after

Inclusive lower bound on due_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

due_before

Inclusive upper bound on due_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

due_is_null

Match only risks whose due_date is unset. Mutually exclusive with due_after/due_before.

boolean | null

expected_after

Inclusive lower bound on expected_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

expected_before

Inclusive upper bound on expected_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

expected_is_null

Match only risks whose expected_date is unset. Mutually exclusive with expected_after/expected_before.

boolean | null

free_text_contains

string | null

id

Array<integer>

default:

id_contains

string | null

impact

array | null

unique items

include_children

When true, the list includes risks that are linked under another risk (i.e. rows with a non-null parent_id). Defaults to false so registers and rollups stay collapsed.

boolean | null

initially_reported_urgency

array | null

unique items

likelihood

array | null

unique items

opened_by

array | null

unique items

order_by

string | null

overdue

Filter to overdue (true) or non-overdue (false) risks. Overdue means open and past due_date.

boolean | null

page

1-indexed page number. Defaults to 1 (explicit null reads as the default); zero is rejected.

integer format: int64

default: 1 >= 1 <= 1000000

page_size

Rows per page. Defaults to 50 (explicit null reads as the default); zero is rejected.

integer format: int64

default: 50 >= 1 <= 500

source

array | null

unique items

status

array | null

unique items

Allowed values: New Urgency Proposed Remediation Closure Proposed Closed

tags

array | null

unique items

threat_objectives

array | null

unique items

title_contains

string | null

type

array | null

unique items

Allowed values: Code Configuration Control Deficiency Policy Procedural Vulnerability Third-party

updated_after

Inclusive lower bound on updated_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

updated_before

Inclusive upper bound on updated_date. RFC 3339 or bare YYYY-MM-DD.

string | null format: date-time

updated_by

array | null

unique items

urgency

array | null

unique items

urgency_shift

One of:

null

null

string

Return only risks whose current urgency has shifted from the urgency they were first reported at. Upgrade matches risks now at least one level more severe; Downgrade matches those now at least one level less severe. Omit to leave the filter off.

string

Allowed values: Upgrade Downgrade

meta_risk_type

required

Which register the export targets (RSK or AKR). Mirrors the active tab on the risks page.

string

Allowed values: org_risk key_risk

selected_risks

required

IDs of selected rows. When non-empty, exports only these and ignores filter. When empty, falls back to “All in filter”.

Array<string>

Responses

200

Export all risks with current state as CSV

Array<integer>