Risk Assess REST API

Overview

The Coupa Risk Assess REST API allows you to retrieve Rist Assess data. Using this API, you can:

• Retrieve a paginated and filtered/unfiltered list of suppliers belonging to a tenant.

• Retrieve extension fields associated with a specific supplier.

• Retrieve evaluation data, such as evaluation scores, comments, and attachments

Note:

Risk Assess SOAP APIs are still currently supported.

Prerequisites

The Risk Assess REST API requires a Coupa Core instance. To turn on the REST API functionality for your tenant, submit a Risk Assess support ticket.

Authentication flow

The Risk Assess REST API uses Coupa Core OpenID Connect (OIDC) authentication in your Coupa Core instance. Use the following authentication flow:

1. Create an OIDC client in your Coupa Core instance with a Grant Type set to Client Credentials. Apply scopes to your client depending on which endpoint you need to access. For specific steps for creating a client in Coupa Core and accessing a token, see OAuth 2.0 and OIDC.
2. Generate the access token using your Coupa Core instance.
3. Send subsequent Risk Assess API requests to your Coupa Risk Assess tenant URL. See the Base URL section below.

Scopes are associated with each API endpoint:

• riskassess.supplier.read: Read supplier data.

• riskassess.supplier.write: Update supplier data.

• riskassess.evaluation.read: Access evaluations data.

Base URL

The Risk Assess REST API uses your Risk Assess instance URL, for example: 

https://<your-domain>.risk.coupahost.com/api/suppliers