---
title: "Suggest Risks With AI"
method: POST
path: "/projectRisks/suggest-ai"
tags: ["Project Risks"]
---

# Suggest Risks With AI

`POST /projectRisks/suggest-ai`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/projectRisks/suggest-ai`
- Auth: HTTP bearer

Read-only: the org-configured LLM returns matching entries from the built-in MIT and IBM risk catalogs plus free-form suggested risks for the use case of the project. Nothing is persisted. Rate limited to 10 requests per hour per user.

## Request body

- object
  - `projectId` integer, required
  - `technologySummary` string: Optional technology summary; overrides project fields in the prompt.
  - `llmKeyId` integer: Optional LLM key id; defaults to the most recent key of the organization.

## Response `200`

Suggestions generated

- object
  - `message` string
  - `data` object
    - `matched` object[]
      - `source` 'mit' | 'ibm'
      - `id` integer
      - `summary` string
      - `description` string
      - `risk_category` string[]
      - `likelihood` string
      - `severity` string
      - `reason` string
      - `ai_lifecycle_phase` string
    - `suggested` object[]
      - `risk_name` string
      - `risk_description` string
      - `risk_category` string[]
      - `ai_lifecycle_phase` string
      - `likelihood` integer
      - `severity` integer
      - `impact` string
      - `mitigation_plan` string
    - `suppressed_count` integer

## Other responses

- `400`: Invalid request, or no LLM keys configured for the organization
- `401`: Unauthorized
- `404`: Project not found
- `429`: Rate limit exceeded (10 requests per hour per user)
- `500`: Internal server error
- `502`: The configured AI provider rejected or failed the request

## Changes

- **2026-10-09** `2c5d7047f9e5`: 1 info
  - endpoint added
- **2026-10-09** `ecad689c5f93`: 1 breaking
  - api path removed without deprecation
- **2026-10-09** `193cc43f7c49`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/verifywise-ai/apis/verifywise-api/changes/projectRisks/suggest-ai/post.md)

---

[API](https://skmtc.dev/verifywise-ai/apis/verifywise-api.md) - [All operations](https://skmtc.dev/verifywise-ai/apis/verifywise-api/llms.txt) - [OpenAPI document](https://skmtc.dev/verifywise-ai/apis/verifywise-api/revisions/9ccf3d4f3918?raw)