Get a risk appetite statement by id

GET

/risk-appetite/{id}

using System.Net.Http.Headers;
var client = new HttpClient();
var request = new HttpRequestMessage
{
    Method = HttpMethod.Get,
    RequestUri = new Uri("https://api.vendorica.com/v1/risk-appetite/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"),
    Headers =
    {
        { "Authorization", "Bearer <token>" },
    },
};
using (var response = await client.SendAsync(request))
{
    response.EnsureSuccessStatusCode();
    var body = await response.Content.ReadAsStringAsync();
    Console.WriteLine(body);
}

package main

import (
  "fmt"
  "net/http"
  "io"
)

func main() {

  url := "https://api.vendorica.com/v1/risk-appetite/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"

  req, _ := http.NewRequest("GET", url, nil)

  req.Header.Add("Authorization", "Bearer <token>")

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://api.vendorica.com/v1/risk-appetite/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0")
  .get()
  .addHeader("Authorization", "Bearer <token>")
  .build();

Response response = client.newCall(request).execute();

const url = 'https://api.vendorica.com/v1/risk-appetite/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

use reqwest;

#[tokio::main]
pub async fn main() {
    let url = "https://api.vendorica.com/v1/risk-appetite/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0";

    let mut headers = reqwest::header::HeaderMap::new();
    headers.insert("Authorization", "Bearer <token>".parse().unwrap());

    let client = reqwest::Client::new();
    let response = client.get(url)
        .headers(headers)
        .send()
        .await;

    let results = response.unwrap()
        .json::<serde_json::Value>()
        .await
        .unwrap();

    dbg!(results);
}

curl --request GET \
  --url https://api.vendorica.com/v1/risk-appetite/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0 \
  --header 'Authorization: Bearer <token>'

Authorizations

bearerAuth
risks:read

Parameters

Path Parameters

required

string format: uuid

Responses

200

Success

application/json

object

success

required

boolean

data

required

object

required

string format: uuid

organizationId

required

string format: uuid

categoryId

required

string format: uuid

statement

required

string

toleranceMetric

required

string

Allowed values: residual_score_avg residual_score_max red_indicator_count

toleranceLimit

required

number

toleranceWarning

required

number | null

ownerUserId

required

string | null format: uuid

reviewCadenceMonths

required

integer | null

nextReviewAt

required

string | null

effectiveFrom

required

string | null

approvalStatus

required

string

Allowed values: not_submitted pending_approval approved rejected

approvalInstanceId

required

string | null format: uuid

approvedAt

required

string | null format: date-time

isArchived

required

boolean

categoryName

required

string | null

ownerEmail

required

string | null

createdBy

required

string | null format: uuid

createdAt

required

string format: date-time

updatedAt

required

string format: date-time

timestamp

required

string format: date-time

requestId

string

message

string

Example

{
  "success": true,
  "data": {
    "id": "cf6bcf7d-05b7-44ed-8e18-a2aa7ec817ea",
    "organizationId": "64b54128-b355-451e-8cb9-bca7cb63f499",
    "categoryId": "4254baf1-5e62-4c89-8ebe-7d3e9fdf224e",
    "statement": "string",
    "toleranceMetric": "residual_score_avg",
    "toleranceLimit": 1,
    "toleranceWarning": 1,
    "ownerUserId": "ccb15d97-d036-418f-8182-5f64b03c2420",
    "reviewCadenceMonths": 1,
    "nextReviewAt": "string",
    "effectiveFrom": "string",
    "approvalStatus": "not_submitted",
    "approvalInstanceId": "0d199fad-4e56-407d-8ff9-e65ac465a5fa",
    "approvedAt": "2026-08-19T09:41:12.004Z",
    "isArchived": true,
    "categoryName": "string",
    "ownerEmail": "string",
    "createdBy": "3db3d4df-ff18-47e7-86ed-9bec200c6e38",
    "createdAt": "2026-08-19T09:41:12.004Z",
    "updatedAt": "2026-08-19T09:41:12.004Z"
  },
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H",
  "message": "string"
}

400

Validation error

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Bad request",
  "code": "BAD_REQUEST",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

401

Unauthorized

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Unauthorized",
  "code": "UNAUTHORIZED",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

403

Forbidden — missing scope

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Forbidden",
  "code": "FORBIDDEN",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

404

Not found

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Resource not found",
  "code": "NOT_FOUND",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

429

Rate limit exceeded

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Too many requests",
  "code": "TOO_MANY_REQUESTS",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}