---
title: "POST /api/audits/{id}/request"
method: POST
path: "/api/audits/{id}/request"
tags: ["Audits"]
---

# POST /api/audits/{id}/request

`POST /api/audits/{id}/request`

Ask for access to another company's audit, and notify its owner. A public audit is granted on the spot (no notification). 404 when the audit does not exist; 409 when it is the caller's own (`audit_belong_to_company`), already shared (`audit_already_shared`) or already requested (`audit_already_requested`). The notification is best-effort: the request is recorded even if it cannot be published.

## Path parameters

- `id` string, required

## Response `200`

Default Response

- object
  - `metadata` object, required
    - `success` boolean, required — True when the request succeeded.
  - `data` object, required
    - `auditId` string, required
    - `status` string, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `409` — Default Response

## Changes

> 57 revisions in range; 1 not diffed.

- **2026-10-06** `6f6121dab5c2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/retraced/apis/api-reference/changes/api/audits/:id/request/post.md)

---

[API](https://skmtc.dev/retraced/apis/api-reference.md) · [All operations](https://skmtc.dev/retraced/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc.dev/retraced/apis/api-reference/revisions/6f6121dab5c2?raw)