---
title: "Create Vendor Risk"
method: POST
path: "/vendorRisks"
tags: ["Vendor Risks"]
---

# Create Vendor Risk

`POST /vendorRisks`

## Request body

- VendorRiskInput
  - `vendor_id` integer, required — ID of the vendor this risk belongs to.
  - `order_no` integer, nullable — Optional ordering number.
  - `risk_description` string, required
  - `impact_description` string, required
  - `likelihood` 'Rare' | 'Unlikely' | 'Possible' | 'Likely' | 'Almost certain', required
  - `risk_severity` 'Negligible' | 'Minor' | 'Moderate' | 'Major' | 'Catastrophic', required
  - `action_plan` string, required
  - `action_owner` integer, required — User ID of the action owner.
  - `risk_level` string, required — Free-text risk level.
  - `is_demo` boolean

## Response `201`

Created successfully

- object
  - `message` string
  - `data` VendorRiskResponse
    - `id` integer
    - `vendor_id` integer
    - `order_no` integer, nullable
    - `risk_description` string
    - `impact_description` string
    - `impact` string, nullable
    - `likelihood` 'Rare' | 'Unlikely' | 'Possible' | 'Likely' | 'Almost certain'
    - `risk_severity` 'Negligible' | 'Minor' | 'Moderate' | 'Major' | 'Catastrophic'
    - `action_plan` string
    - `action_owner` integer
    - `risk_level` string
    - `is_demo` boolean
    - `created_at` string, date-time
    - `updated_at` string, date-time

## Other responses

- `401` — Unauthorized
- `500` — Internal server error

## Changes

- **2026-04-21** `55cdc040840c` — 9 breaking, 3 info
  - added the new required request property `action_owner`
  - added the new required request property `action_plan`
  - added the new required request property `impact_description`
  - added the new required request property `likelihood`
  - …8 more
- **2026-04-05** `ac49160fcab0` — 1 breaking, 1 info
  - api path removed without deprecation
  - endpoint added
- **2026-04-05** `c419b1e72a65` — 1 breaking, 1 info
  - api path removed without deprecation
  - endpoint added
- **2025-09-11** `cfa9ae933c17` — 2 breaking, 4 warning, 9 info
  - removed `subschema #1` from the `risk_level` request property `anyOf` list
  - the `risk_level` request property type/format changed from ``/`` to `string`/``
  - removed the request property `owner`
  - removed the request property `review_date`
  - …11 more
- **2025-01-22** `ed48b7196725` — 1 breaking, 9 warning, 15 info
  - the `risk_level` request property type/format changed from `string`/`` to ``/``
  - removed the request property `action_owner`
  - removed the request property `action_plan`
  - removed the request property `impact_description`
  - …21 more

[Change history](https://skmtc.dev/verifywise-ai/apis/verifywise-api/changes/vendorRisks/post.md)

---

[API](https://skmtc.dev/verifywise-ai/apis/verifywise-api.md) · [All operations](https://skmtc.dev/verifywise-ai/apis/verifywise-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/verifywise-ai/verifywise-api/revisions/d86d0bf8bebe/schema)