How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Credo AI Entity Controls API

The entity_controls API from Credo AI — 7 operation(s) for entity_controls.

Credo AI Entity Controls API is one of 40 APIs that Credo AI publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, a getting-started guide, and authentication docs.

This API exposes 10 operations across 7 paths, and defines 20 schemas. It is described by OpenAPI 3.2.0.

Requests are made against a single base URL, /api/v2/credoai.

10 operations 7 paths 20 schemas 1 DELETE5 GET1 PATCH3 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
Base URL
https://api.credo.ai/api/v2/{tenant}
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Credo AI Entity Controls API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer).

Paths & Operations 10

Across 7 paths, the API surfaces 10 operations — 1 DELETE, 5 GET, 1 PATCH, 3 POST. Each is listed below with its method, path, parameters, and response codes.

entity_controls 10
GET
/entities/{entity_id}/controls/{control_id}/evidences
Retrieve a list of evidences associated with a specific entity control.
CredoAIWeb.API.V2.Entity.ControlEvidenceController.index 2 params → 200401404
POST
/entities/{entity_id}/controls/{control_id}/evidences
Create a new evidence entry for a specified requirement of an entity control.
CredoAIWeb.API.V2.Entity.ControlEvidenceController.create 2 params body → 201401403
POST
/entities/{entity_id}/controls/{control_id}/tasks
Create a new task for a specific control.
CredoAIWeb.API.V2.Entity.ControlController.create_task 2 params body → 201401403404
GET
/entities/{entity_id}/controls
Retrieve a list of controls associated with a specific entity.
CredoAIWeb.API.V2.Entity.ControlController.index 1 param → 200401404
GET
/entities/{entity_id}/controls/{control_id}/files
Retrieves a list of all files (attachments) associated with a specific control for an entity.
CredoAIWeb.API.V2.Entity.ControlFileController.index 2 params → 200401
POST
/entities/{entity_id}/controls/{control_id}/files
Creates a new file (attachment) associated with a specific control for an entity.
CredoAIWeb.API.V2.Entity.ControlFileController.create 2 params body → 201401403
GET
/entities/{entity_id}/controls/{id}
Fetch detailed information about a specific control within an entity.
CredoAIWeb.API.V2.Entity.ControlController.show 2 params → 200401404
PATCH
/entities/{entity_id}/controls/{id}
Update the details of a specific control within an entity.
CredoAIWeb.API.V2.Entity.ControlController.update 2 params body → 200401403404
GET
/entities/{entity_id}/controls/{id}/cookbook
Retrieve the cookbook associated with a specific control. Only available for use case entities.
CredoAIWeb.API.V2.Entity.ControlController.cookbook 2 params → 200401404
DELETE
/entities/{entity_id}/controls/{control_id}/files/{id}
Deletes a specific file (attachment) associated with a control for an entity.
CredoAIWeb.API.V2.Entity.ControlFileController.delete 3 params → 204401403404

Schemas 20

The contract defines 20 schemas that model the data the API accepts and returns. The most detailed are EntityControlCookbookResource (4 properties), EntityControlResource (4 properties), TaskResource (4 properties), EntityControlFileResource (4 properties). Each schema is shown below with its type and property counts.

TaskResponse
object
A JSON-API document with a single [TaskResource](taskresource) resource
2 properties 1 required
EntityControlTaskCreateRequest
object
1 property
EntityControlsResponse
object
A collection of [EntityControlResource](entitycontrolresource)
1 property 1 required
EntityControlResponse
object
A JSON-API document with a single [EntityControlResource](entitycontrolresource) resource
2 properties 1 required
TaskResource
object
4 properties
EvidencesResponse
object
A collection of [EvidenceResource](evidenceresource)
1 property 1 required
EvidenceResponse
object
A JSON-API document with a single [EvidenceResource](evidenceresource) resource
2 properties 1 required
EntityControlCookbookResponse
object
A JSON-API document with a single [EntityControlCookbookResource](entitycontrolcookbookresource) resource
2 properties 1 required
EntityControlFileResource
object
4 properties
EntityControlFileCreateRequest
object
1 property
EvidenceResource
object
4 properties
EntityControlEvidenceCreateRequest
object
1 property
EntityControlFileResponse
object
A JSON-API document with a single [EntityControlFileResource](entitycontrolfileresource) resource
2 properties 1 required
EntityControlCookbookResource
object
4 properties
ForbiddenError
object
1 property
AuthError
object
1 property
NotFoundError
object
1 property
EntityControlUpdateRequest
object
1 property
EntityControlResource
object
4 properties
EntityControlFilesResponse
object
A page of [EntityControlFileResponse](entitycontrolfileresponse) results
2 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

credo-ai-entity-controls-api-openapi.yml Raw ↑

Other APIs Credo AI publishes across the network.

Credo AI Governance Intelligence Pro MCP Server
Credo AI Alerts API
Credo AI Audit Logs API
Credo AI Comment Threads API
Credo AI Entities API
Credo AI Entity Control Assignments API
Credo AI Entity Evidences API
Credo AI Entity Policy Packs API
Credo AI Entity Risk Scenario Controls API
Credo AI Entity Risk Scenarios API
Credo AI Entity Section Assignments API
Credo AI Entity Types API
Where this information came from

This is an independent, third-party profile of Credo AI Entity Controls API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.