---
title: "Update Vendor Risk By Id"
method: PATCH
path: "/vendorRisks/{id}"
tags: ["Vendor Risks"]
---

# Update Vendor Risk By Id

`PATCH /vendorRisks/{id}`

## Path parameters

- `id` integer, required

## Request body

- VendorRiskInput
  - `vendor_id` integer, required — ID of the vendor this risk belongs to.
  - `order_no` integer, nullable — Optional ordering number.
  - `risk_description` string, required
  - `impact_description` string, required
  - `likelihood` 'Rare' | 'Unlikely' | 'Possible' | 'Likely' | 'Almost certain', required
  - `risk_severity` 'Negligible' | 'Minor' | 'Moderate' | 'Major' | 'Catastrophic', required
  - `action_plan` string, required
  - `action_owner` integer, required — User ID of the action owner.
  - `risk_level` string, required — Free-text risk level.
  - `is_demo` boolean

## Response `202`

Accepted

- object
  - `message` string
  - `data` VendorRiskResponse
    - `id` integer
    - `vendor_id` integer
    - `order_no` integer, nullable
    - `risk_description` string
    - `impact_description` string
    - `impact` string, nullable
    - `likelihood` 'Rare' | 'Unlikely' | 'Possible' | 'Likely' | 'Almost certain'
    - `risk_severity` 'Negligible' | 'Minor' | 'Moderate' | 'Major' | 'Catastrophic'
    - `action_plan` string
    - `action_owner` integer
    - `risk_level` string
    - `is_demo` boolean
    - `created_at` string, date-time
    - `updated_at` string, date-time

## Other responses

- `401` — Unauthorized
- `500` — Internal server error

## Changes

- **2026-04-21** `55cdc040840c` — 10 breaking, 3 info
  - added the new required request property `action_owner`
  - added the new required request property `action_plan`
  - added the new required request property `impact_description`
  - added the new required request property `likelihood`
  - …9 more
- **2026-04-05** `c419b1e72a65` — 1 breaking, 7 warning, 6 info
  - removed the media type `application/json` for the response with the status `200`
  - removed the request property `id`
  - removed the request property `likelihood`
  - removed the request property `project_id`
  - …10 more
- **2025-09-11** `cfa9ae933c17` — 1 info
  - endpoint added
- **2025-01-22** `ed48b7196725` — 1 breaking
  - api removed without deprecation

[Change history](https://skmtc.dev/verifywise-ai/apis/verifywise-api/changes/vendorRisks/:id/patch.md)

---

[API](https://skmtc.dev/verifywise-ai/apis/verifywise-api.md) · [All operations](https://skmtc.dev/verifywise-ai/apis/verifywise-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/verifywise-ai/verifywise-api/revisions/5878ba786a89/schema)