---
title: "POST /api/rpc/queryReports"
method: POST
path: "/api/rpc/queryReports"
tags: ["reports"]
---

# POST /api/rpc/queryReports

`POST /api/rpc/queryReports`

## Request

- Base URL: `https://21risk.com`
- URL: `https://21risk.com/api/rpc/queryReports`
- Auth: OAuth 2 (client credentials, token URL `/api/v1/oauth/token`)

Get all reports (audits) in a group. Supports pagination, filtering by board, model, version, site, status, auditor, and date fields. Pass boardId=null for org-level view.

## Request body

- object
  - `tenant` unknown, required
  - `boardId` string, nullable, required
  - `query` string
  - `model` string: Operands must be strings. Comma-separated values for OR, semicolon for AND. Use ! to exclude, ^ for exact match, * for any value, !* for empty. Use the facet query to discover valid values.
  - `version` string: Operands must be strings. Comma-separated values for OR, semicolon for AND. Use ! to exclude, ^ for exact match, * for any value, !* for empty. Use the facet query to discover valid values.
  - `site` string: Operands must be strings. Comma-separated values for OR, semicolon for AND. Use ! to exclude, ^ for exact match, * for any value, !* for empty. Use the facet query to discover valid values.
  - `status` string: Valid operands: draft, published. Comma-separated values for OR, semicolon for AND. Use ! to exclude, ^ for exact match, * for any value, !* for empty.
  - `auditor` string: Operands must be user IDs, or @me for the signed-in user, such as "@me" or "!@me". Comma-separated values for OR, semicolon for AND. Use ! to exclude, ^ for exact match, * for any value, !* for empty. Use the facet query to discover valid values.
  - `createdBy` string: Operands must be user IDs, or @me for the signed-in user, such as "@me" or "!@me". Comma-separated values for OR, semicolon for AND. Use ! to exclude, ^ for exact match, * for any value, !* for empty. Use the facet query to discover valid values.
  - `published` string: ISO dates (2024-01-15), periods (2024, 2024-01), comparisons (>=2024, <2024-06), ranges (2024-01-01..2024-12-31), or relative dates (@today, @today-7d). Units: d, w, m, y. Use * for any date, !* for empty.
  - `date` string: ISO dates (2024-01-15), periods (2024, 2024-01), comparisons (>=2024, <2024-06), ranges (2024-01-01..2024-12-31), or relative dates (@today, @today-7d). Units: d, w, m, y. Use * for any date, !* for empty.
  - `lastModified` string: ISO dates (2024-01-15), periods (2024, 2024-01), comparisons (>=2024, <2024-06), ranges (2024-01-01..2024-12-31), or relative dates (@today, @today-7d). Units: d, w, m, y. Use * for any date, !* for empty.
  - `includes` string[]: Only include records whose IDs are in this list.
  - `excludes` string[]: Exclude records whose IDs are in this list.
  - `after` string: Cursor-based pagination: return results after this cursor. Use pageInfo.endCursor from the previous page.
  - `before` string: Cursor-based pagination: return results before this cursor. Use pageInfo.startCursor from the current/previous page.
  - `first` union
    - integer
    - 'all'
  - `last` integer: Cursor-based pagination: number of results to return before the before cursor. Use for backward pagination.
  - `sort` 'model' | 'version' | 'site' | 'status' | 'auditor' | 'createdBy' | 'published' | 'date' | 'lastModified'
  - `direction` 'asc' | 'desc'

## Response `200`

Successful response

---

[API](https://skmtc.dev/21risk/apis/21risk-api.md) · [All operations](https://skmtc.dev/21risk/apis/21risk-api/llms.txt) · [OpenAPI document](https://skmtc.dev/21risk/apis/21risk-api/revisions/273a727dfd49?raw)