---
title: "List all questionnaires"
method: GET
path: "/questionnaires/all/v1"
tags: ["vendors"]
---

# List all questionnaires

`GET /questionnaires/all/v1`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/questionnaires/all/v1`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/questionnaires/all/v1/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a paginated list of all questionnaires across all vendors for the organization.

Required API key permissions: `VendorRisk` (select when creating API key in Account Settings)

## Query parameters

- `vendor_labels` string[]
- `vendor_label_ids_match_all` boolean
- `include_unlabeled` boolean
- `min_score` integer
- `max_score` integer
- `name_prefix` string
- `vendor_ids` integer[]
- `vendor_label_ids_do_not_match` boolean
- `vendor_tiers` integer[]
- `portfolios` string[]
- `assessed_vendors_only` boolean
- `questionnaire_type_ids` integer[]
- `vendor_date_added_start` string, date-time
- `vendor_date_added_end` string, date-time
- `vendor_date_added_before` boolean
- `vendor_date_added_between` boolean
- `page_size` integer
- `page_token` string
- `sort_by` 'date_due' | 'vendor_name' | 'name' | 'status' | 'date_created' | 'date_completed'
- `sort_desc` boolean
- `status` string
- `exclude_archived` boolean

## Response `200`

List of questionnaires across all vendors

- QuestionnairesListAllRespBody: QuestionnairesListAllRespBody is the response body for the questionnaires list endpoint
  - `next_page_token` string: Token for the next page of results
  - `questionnaires` QuestionnaireWithVendor[]: The list of questionnaires
    - `archived` boolean: Flag indicating whether the questionnaire has been archived
    - `date_completed` string, date-time: When the questionnaire was completed. Null if not yet completed.
    - `due_date` string, date-time: The datetime that the questionnaire is due to be completed. This field will be null if no due date has been set.
    - `id` integer: The id of the questionnaire.
    - `in_remediation` boolean: Flag indicating whether there are risks under remediation in this questionnaire
    - `name` string: The name of the questionnaire.
    - `returned_at` string, date-time: The datetime that the questionnaire was returned by the vendor. This field will be null if the questionnaire has not been returned.
    - `sent_at` string, date-time: The datetime that the questionnaire was sent.
    - `status` 'sent' | 'opened' | 'returned' | 'inreview' | 'complete' | 'cancelled' | 'published': The current status of the questionnaire.
    - `vendor_hostname` string: The vendor's primary hostname
    - `vendor_id` integer: The vendor ID
    - `vendor_name` string: The vendor's display name
  - `total_results` integer: The total number of matching results

## Other responses

- `403`: Account does not have access to requested entities
- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)