API Reference
Build custom integrations, sync your IT asset inventory, and automate compliance telemetry using the GRC Copilot Pro REST API.
Authentication
All API requests require a Bearer token in the Authorization header. You can generate a Long-Lived API Token in your dashboard settings (PRO_PLUS plan required).
curl -H "Authorization: Bearer YOUR_API_KEY" https://api.grccopilot.pro/v1/ping
Endpoints Overview
GET
/v1/risksRetrieve all active entries from your organizational Risk Register.
POST
/v1/incidentsProgrammatically log a new security incident from your SIEM or alerting system.
PATCH
/v1/vendors/:idUpdate the compliance status or risk level of a third-party vendor.
Need API Access?
REST API access and webhooks are exclusive features of our Enterprise / PRO_PLUS tiers.
