openapi-risk · diff
git:20260610.a6e7f3f to git:20260610.0dfad19
26 added, 13 removed. Audit A to A.
---
name: openapi-risk
- description: Assess the reliability of Italian/worldwide companies and individuals through Openapi Risk - credit scores, CRIF reports, KYC checks, negative events, protests, personal/economic data. Use for due diligence, creditworthiness, AML/KYC questions.
+ description: Assess the reliability of companies and individuals through Openapi Risk - credit scores, CRIF reports, patrimonial reports, negative events, heirs reports, worldwide KYC (PEP, sanction lists, adverse media). Use for due diligence, creditworthiness, AML/KYC questions.
---
# Openapi Risk
Base URL: `https://risk.openapi.com` — reports and scores on natural and legal persons, sourced from CRIF, the Protest Register and other official registers.
Authentication: Bearer token — see the `openapi-auth` skill.
- ## Main capabilities (56 endpoints — see reference for the full list)
+ ## Credit score (synchronous, start here)
- - **Credit score**: `GET /IT-creditscore-top/{vat_or_taxcode}` for a quick Italian company score; deeper CRIF-based reports via async endpoints.
- - **KYC**: `POST /WW-kyc-full` for worldwide know-your-customer checks.
- - **Negative events**: protests, prejudicial acts, bankruptcies on companies and individuals.
- - **Person data**: personal data, phones, economic indicators of natural/legal persons.
+ - `GET /IT-creditscore-top/{vatCode_taxCode_or_id}` — top-level score for an Italian company
+ - `GET /IT-creditscore-start/…` / `GET /IT-creditscore-advanced/…` — lighter/deeper variants
+ - `GET /IT-verifica_cf/{codice_fiscale}` — fiscal code check
- Most heavy reports follow the async pattern (start → poll with `id` or `callback`) described in the [platform guide](../../knowledge/platform-guide.md#async-request-pattern).
+ ## Reports (async: `POST /<type>` → `GET /<type>/{id}` → `GET /<type>/{id}/download` for the PDF)
- ## Compliance
+ | Resource | Subject |
+ |---|---|
+ | `IT-report-persona`, `IT-report-persona-top` | Natural person report |
+ | `IT-patrimoniale-persona`, `IT-patrimoniale-persona-top` | Patrimonial (assets) report |
+ | `IT-report-azienda`, `IT-report-azienda-top` | Company report |
+ | `IT-crif-persona`, `IT-crif-azienda` | CRIF search (requires a signed delegation: upload via `PATCH /{id}`, template via `GET /{id}/delega`) |
+ | `IT-eredi-con-accettazione`, `IT-eredi-senza-accettazione` | Heirs reports |
+ | `IT-negativita` (+ `GET /IT-negativita/{id}/dettaglio`) | Negative events |
+ | `IT-richiesta` | Generic request listing/status/download |
- - Several Risk services fall under the Italian **TULPS** regulation: the account must have completed identity-document verification in the console before activation ([FAQ](../../knowledge/faq.md)).
- - Reports are paid per request and can be expensive — check wallet credit and confirm with the user before launching them.
- - Personal data returned is subject to GDPR: use it only for the stated, legitimate purpose; do not store it in the repo.
+ ## Worldwide KYC
- ## References
+ - `POST /WW-kyc-full` — full check; targeted: `/WW-kyc-pep`, `/WW-kyc-sanction_list`, `/WW-kyc-adverse_media`
+ - `GET /WW-kyc-evidences`, `GET /WW-kyc-evidences/{id}`, `GET /WW-kyc-evidences/{id}/{entity_id}` — results and evidences
+ - `POST|GET|DELETE /WW-kyc-full-monitor` — continuous KYC monitoring
- Full spec: [knowledge/oas/risk.openapi.json](../../knowledge/oas/risk.openapi.json) · endpoint list: [knowledge/services/risk.md](../../knowledge/services/risk.md)
+ ## Compliance
+
+ - Several Risk services fall under the Italian **TULPS** regulation (Art. 6 license): the account must have completed identity-document verification in the console before activation.
+ - Reports are paid and can be expensive — check wallet credit and confirm with the user before launching them.
+ - Returned personal data is subject to GDPR: use only for the stated purpose, never store it in the repo.
+
+ Full spec: https://console.openapi.com/oas/en/risk.openapi.json