---
title: "GET /api/activity/reports/risk/members/"
method: GET
path: "/api/activity/reports/risk/members/"
tags: ["activity"]
---

# GET /api/activity/reports/risk/members/

`GET /api/activity/reports/risk/members/`

## Request

- Base URL: `https://app.pixiebrix.com`
- URL: `https://app.pixiebrix.com/api/activity/reports/risk/members/`
- Auth: none declared

Return the organization's scored members ranked by advisory risk score, highest first, with their groups and the tier-distribution counts (including members with no scored security events in the window, as ``not_scored``; service accounts are excluded from the population). The list is capped, with ``truncated`` set when it is partial; the distribution always covers the whole scoped population. The score is a recency-weighted sum of the member's security events over a fixed rolling 30 days, so there is no ``start``/``end``. Optional ``groups`` narrows the population (and the distribution with it); optional ``tier`` filters only the list. Restricted to organization admins/managers or activity & security report viewers, and gated by both the activity-tracking and risk-scoring flags.

## Query parameters

- `organization` string, uuid, required
- `groups` string[]
- `tier` 'critical' | 'high' | 'medium' | 'low'

## Response `200`

- RiskMembersResponse
  - `organization` string, uuid, required
  - `start` string, date-time, required
  - `end` string, date-time, required
  - `members` object[], required
    - `user_id` string, uuid, required
    - `email` string, nullable, required
    - `score` integer, required
    - `tier` 'critical' | 'high' | 'medium' | 'low', required
    - `raw` number, required
    - `event_count` integer, required
    - `top_category` string, required
    - `groups` object[], required
      - `id` string, uuid, required
      - `name` string, required
    - `score_change_7d` integer, nullable, required: Latest daily snapshot score minus the one 7 days earlier; null when either is missing, they differ in model version, or no snapshot was taken today or yesterday (UTC).
  - `tier_distribution` object, required
    - `critical` integer, required
    - `high` integer, required
    - `medium` integer, required
    - `low` integer, required
    - `not_scored` integer, required
  - `truncated` boolean, required

## Changes

- **2026-10-03** `c559a36fa75f`: 2 info
  - added the required property `members/items/score_change_7d` to the response with the `200` status (media type: application/json; version=1.0)
  - added the required property `members/items/score_change_7d` to the response with the `200` status (media type: application/vnd.pixiebrix.api+json; version=1.0)
- **2026-09-23** `9a649ada036f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/changes/api/activity/reports/risk/members/get.md)

---

[API](https://skmtc.dev/pixiebrix/apis/pixiebrix-api.md) - [All operations](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/llms.txt) - [OpenAPI document](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/revisions/b5614ae64ccc?raw)