---
title: "GET /api/activity/reports/risk/member/"
method: GET
path: "/api/activity/reports/risk/member/"
tags: ["activity"]
---

# GET /api/activity/reports/risk/member/

`GET /api/activity/reports/risk/member/`

## Request

- Base URL: `https://app.pixiebrix.com`
- URL: `https://app.pixiebrix.com/api/activity/reports/risk/member/`
- Auth: none declared

Return one member's advisory risk score and tier with the per-cell (category, severity, action) points and per-category subtotals behind it, over the same fixed rolling 30 days as the member list. A member with no scored security events in the window (``info`` events score nothing) is ``not_scored`` with a null score, and so is a service account, which is never scored. With ``percentiles=true``, ``percentiles`` ranks the member against the organization's tracked members (any activity in the window) and each of their groups; a population under five tracked members has a null percentile. Without it, or for a member who is not scored, ``percentiles`` is null. Restricted to organization admins/managers or activity & security report viewers, and gated by both the activity-tracking and risk-scoring flags.

## Query parameters

- `organization` string, uuid, required
- `user` string, uuid, required
- `percentiles` boolean

## Response `200`

- RiskMemberResponse
  - `organization` string, uuid, required
  - `start` string, date-time, required
  - `end` string, date-time, required
  - `user_id` string, uuid, required
  - `email` string, nullable, required
  - `score` integer, nullable, required
  - `tier` 'critical' | 'high' | 'medium' | 'low' | 'not_scored', required
  - `raw` number, required
  - `event_count` integer, required
  - `groups` object[], required
    - `id` string, uuid, required
    - `name` string, required
  - `percentiles` object, nullable, required
    - `organization` object, required
      - `percentile` integer, nullable, required
      - `tracked_members` integer, required
    - `groups` object[], required
      - `id` string, uuid, required
      - `name` string, required
      - `percentile` integer, nullable, required
      - `tracked_members` integer, required
  - `cells` object[], required
    - `category` string, required
    - `severity` 'info' | 'low' | 'medium' | 'high' | 'critical', required
    - `action` string, required
    - `event_count` integer, required
    - `points` number, required
  - `by_category` object[], required
    - `category` string, required
    - `event_count` integer, required
    - `points` number, required

## Changes

- **2026-09-24** `709cc2f61a8a`: 2 warning
  - added the new `info` enum value to the `cells/items/severity` response property for the response status `200` (media type: application/json; version=1.0)
  - added the new `info` enum value to the `cells/items/severity` response property for the response status `200` (media type: application/vnd.pixiebrix.api+json; version=1.0)
- **2026-09-24** `c932af1dd0fb`: 3 info
  - added the new optional `query` request parameter `percentiles`
  - added the required property `percentiles` to the response with the `200` status (media type: application/json; version=1.0)
  - added the required property `percentiles` to the response with the `200` status (media type: application/vnd.pixiebrix.api+json; version=1.0)
- **2026-09-23** `9a649ada036f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/changes/api/activity/reports/risk/member/get.md)

---

[API](https://skmtc.dev/pixiebrix/apis/pixiebrix-api.md) - [All operations](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/llms.txt) - [OpenAPI document](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/revisions/b5614ae64ccc?raw)