---
title: "Get Trust Center access"
method: GET
path: "/trust_exchange/trust_center/access"
tags: ["trust_exchange"]
---

# Get Trust Center access

`GET /trust_exchange/trust_center/access`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/trust_exchange/trust_center/access`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/trust_exchange/trust_center/access/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns information about who has access to Trust Centers, including users and
organizations with access, pending access requests, and invited emails.

Note: Access applies across all of your Trust Centers, not to one in particular.

Required API key permissions: `TrustExchange` (select when creating API key in Account Settings)

## Response `200`

Trust Center access detail.

- TrustCenterAccessResponse
  - `access_requests` TrustCenterAccessRequest[]: The pending access requests for the Trust Center.
    - `created_at` string, date-time: The date the access request was created.
    - `has_signed_nda` boolean: Whether the user has a current signed NDA.
    - `id` integer: The ID of the access request.
    - `message` string: The message included with the access request.
    - `nda_pending_countersign` boolean: Whether the user has signed the NDA and it is awaiting countersignature.
    - `org_name` string: The name of the user's organization. Empty for user-only requests.
    - `org_primary_hostname` string: The primary hostname of the user's organization. Empty for user-only requests.
    - `requested_resources` TrustCenterAccessRequests
      - `documents` TrustCenterAccessDocumentRequest[]: Content Library document access requests
        - `uuid` string: UUID of the Content Library document.
      - `questionnaires` TrustCenterAccessQuestionnaireRequest[]: Public questionnaire access requests
        - `id` integer: ID of the questionnaire.
    - `updated_at` string, date-time: The date the access request was last updated.
    - `user_email` string: The email of the user who requested access.
    - `user_name` string: The name of the user who requested access.
  - `invited_emails` string[]: The email addresses that have been invited to access the Trust Center.
  - `users_and_orgs_with_access` TrustCenterAccessItem[]: The users and organizations with access to the Trust Center.
    - `created_at` string, date-time: The date the access was created.
    - `has_signed_nda` boolean: Whether the user or organization has a current signed NDA.
    - `nda_exempt` boolean: Whether the user or organization is exempt from NDA requirements.
    - `nda_manually_approved` boolean: Whether the NDA was manually approved for this user or organization.
    - `nda_pending_countersign` boolean: Whether the user or organization has signed the NDA and it is awaiting countersignature.
    - `org_name` string: The name of the organization with access. Empty if user-only access.
    - `org_primary_hostname` string: The primary hostname of the organization with access. Empty if user-only access.
    - `resources` TrustCenterAccessResources
      - `documents` TrustCenterAccessDocumentResource[]: Content Library documents
        - `expired` boolean: If access to the document has expired or not.
        - `expires` string, date-time: Access expiry date (null if it will never expire).
        - `uuid` string: UUID of the Content Library document.
      - `questionnaires` TrustCenterAccessQuestionnaireResource[]: Public questionnaires
        - `expired` boolean: If access to the questionnaire has expired or not.
        - `expires` string, date-time: Access expiry date (null if it will never expire).
        - `id` integer: ID of the questionnaire.
    - `updated_at` string, date-time: The date the access was last updated.
    - `user_email` string: The email of the user with access. Empty if org-only access.
    - `user_name` string: The name of the user with access. Empty if org-only access.

## Other responses

- `403`: Account does not have access to requested entities
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

## Changes

- **2026-11-07** `d044bf6dc61e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/changes/trust_exchange/trust_center/access/get.md)

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)