---
title: "List vendor assessments"
method: GET
path: "/vendor/assessment/list"
tags: ["vendors"]
---

# List vendor assessments

`GET /vendor/assessment/list`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/vendor/assessment/list`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/vendor/assessment/list/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a list of assessments for a specific vendor.
Each assessment groups together versions over time.

Note: use /api/public/vendor/security_profile/assessment instead for security profile assessments.

Required API key permissions: `VendorRisk` (select when creating API key in Account Settings)

## Query parameters

- `vendor_id` integer
- `vendor_primary_hostname` string
- `status` string

## Response `200`

List of vendor assessments

- GetVendorAssessmentStreamsResponsePayload
  - `assessments` AssessmentListItem[]: The list of assessments for this vendor
    - `archived_at` string: The date when the assessment was archived. Will be null if the assessment is not archived.
    - `author_email` string: The email address of the author who created the latest version.
    - `author_name` string: The name of the author who created the latest version.
    - `for_security_profile` boolean: Indicates whether this is a security profile assessment.
    - `id` integer: The unique identifier for this assessment.
    - `name` string: The name of the assessment.
    - `published_date` string: The date when the latest version was published. Will be null if no version has been published yet.
    - `reassessment_date` string: The date when reassessment is recommended. Will be null if no reassessment date is set.
    - `scope` string[]: The scope of the assessment.
    - `status` string: The current status of the latest version in this assessment. Possible values: draft, published, cancelled
    - `version_number` integer: The current version number of the latest version in this assessment.

## Other responses

- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

## Changes

- **2026-11-07** `d044bf6dc61e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/changes/vendor/assessment/list/get.md)

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)