How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Credo AI Vendors API

Operations related to vendors and their questionnaires

Credo AI Vendors API is one of 40 APIs that Credo AI publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Vendors. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, a getting-started guide, and authentication docs.

This API exposes 23 operations across 14 paths, and defines 33 schemas. It is described by OpenAPI 3.2.0.

Requests are made against a single base URL, /api/v2/credoai.

23 operations 14 paths 33 schemas 5 DELETE9 GET3 PATCH6 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
Base URL
https://api.credo.ai/api/v2/{tenant}
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Credo AI Vendors API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer).

Paths & Operations 23

Across 14 paths, the API surfaces 23 operations — 5 DELETE, 9 GET, 3 PATCH, 6 POST. Each is listed below with its method, path, parameters, and response codes.

vendors 23

Operations related to vendors and their questionnaires

GET
/vendors/{vendor_id}/model_links
Retrieve a list of model links associated with a specific vendor.
CredoAIWeb.API.V2.Vendor.ModelLinkController.index 1 param → 200401
POST
/vendors/{vendor_id}/model_links
Create a new model link for a specific vendor.
CredoAIWeb.API.V2.Vendor.ModelLinkController.create 1 param body → 201401403404
GET
/vendors/{vendor_id}/files
Retrieve a list of files associated with a specific vendor.
CredoAIWeb.API.V2.Vendor.FileController.index 1 param → 200401403
POST
/vendors/{vendor_id}/files
Upload a new file for a specific vendor.
CredoAIWeb.API.V2.Vendor.FileController.create 1 param body → 200401403404
GET
/vendors
Retrieve a list of all vendors.
CredoAIWeb.API.V2.VendorController.index 6 params → 200401
POST
/vendors
Create a new vendor with the provided attributes.
CredoAIWeb.API.V2.VendorController.create body → 201401403
DELETE
/vendors/{id}
Remove a vendor from the system using its unique ID.
CredoAIWeb.API.V2.VendorController.delete 1 param → 204401403404
GET
/vendors/{id}
Fetch detailed information about a specific vendor by ID.
CredoAIWeb.API.V2.VendorController.show 2 params → 200401404
PATCH
/vendors/{id}
Update the details of an existing vendor identified by ID.
CredoAIWeb.API.V2.VendorController.update 1 param body → 200401403404
DELETE
/vendors/{vendor_id}/model_links/{id}
Delete a specific model link associated with a vendor.
CredoAIWeb.API.V2.Vendor.ModelLinkController.delete 2 params → 204401403404
DELETE
/vendors/{vendor_id}/questionnaires/{id}
Remove a specific questionnaire from a vendor's collection.
CredoAIWeb.API.V2.Vendor.QuestionnaireController.delete 2 params → 204401403404
PATCH
/vendors/{vendor_id}/questionnaires/{id}
Update the version of a specific questionnaire for a vendor.
CredoAIWeb.API.V2.Vendor.QuestionnaireController.update 2 params body → 200401403404
GET
/vendors/{vendor_id}/evidences
Retrieve a list of active evidences associated with a specific vendor.
CredoAIWeb.API.V2.Vendor.EvidenceController.index 3 params → 200401
DELETE
/vendors/{vendor_id}/files/{id}
Delete a specific file associated with a vendor by its unique ID.
CredoAIWeb.API.V2.Vendor.FileController.delete 2 params → 204401403404
DELETE
/vendors/{vendor_id}/evidences/{id}
Deactivate a specific evidence for the given vendor.
CredoAIWeb.API.V2.Vendor.EvidenceController.delete 2 params → 204401403404
GET
/vendors/{vendor_id}/questionnaire_sections/{section_id}
Retrieves a specific questionnaire section for a vendor
CredoAIWeb.API.V2.Vendor.Questionnaire.SectionController.show 2 params → 200401403404
POST
/vendors/{vendor_id}/questionnaire_sections/{section_id}/tasks
Creates a new task for a vendor questionnaire section
CredoAIWeb.API.V2.Vendor.Questionnaire.SectionController.create_task 2 params body → 201401403404
GET
/vendors/{vendor_id}/questionnaire_sections/{section_id}/evidences
Retrieves a list of evidences associated with a specific vendor's questionnaire section.
CredoAIWeb.API.V2.Vendor.Questionnaire.SectionEvidenceController.index 2 params → 200401403404
POST
/vendors/{vendor_id}/questionnaire_sections/{section_id}/evidences
Creates a new evidence entry for a specific question within a vendor's questionnaire section.
CredoAIWeb.API.V2.Vendor.Questionnaire.SectionEvidenceController.create 2 params body → 200401404
GET
/vendors/{vendor_id}/questionnaires
Retrieve a list of all questionnaires associated with a specific vendor.
CredoAIWeb.API.V2.Vendor.QuestionnaireController.index 1 param → 200401404
POST
/vendors/{vendor_id}/questionnaires
Create a new questionnaire for a specific vendor.
CredoAIWeb.API.V2.Vendor.QuestionnaireController.create 1 param body → 201401403404
GET
/vendors/{vendor_id}/custom_fields
Retrieve a list of all custom fields associated with a specific vendor.
CredoAIWeb.API.V2.Vendor.CustomFieldController.index 1 param → 200401404
PATCH
/vendors/{vendor_id}/custom_fields
Update the value of a specific custom field for a vendor.
CredoAIWeb.API.V2.Vendor.CustomFieldController.update_one 1 param body → 200401403404

Schemas 33

The contract defines 33 schemas that model the data the API accepts and returns. The most detailed are VendorFileResource (4 properties), VendorQuestionnaireSectionResource (4 properties), VendorResource (4 properties), VendorQuestionnaireResource (4 properties). Each schema is shown below with its type and property counts.

VendorCustomFieldsResponse
object
A collection of [VendorCustomFieldResource](vendorcustomfieldresource)
1 property 1 required
VendorEvidencesResponse
object
A collection of [VendorEvidenceResource](vendorevidenceresource)
1 property 1 required
VendorUpdateRequest
object
1 property
VendorFileResponse
object
A JSON-API document with a single [VendorFileResource](vendorfileresource) resource
2 properties 1 required
VendorCustomFieldResource
object
4 properties
VendorCustomFieldUpdateOneRequest
object
1 property
TaskResponse
object
A JSON-API document with a single [TaskResource](taskresource) resource
2 properties 1 required
VendorQuestionnaireUpdateRequest
object
1 property
VendorFileResource
object
4 properties
ModelVendorLinkCreateRequest
object
1 property
VendorQuestionnaireSectionResource
object
4 properties
TaskResource
object
4 properties
VendorResource
object
4 properties
VendorQuestionnaireSectionResponse
object
A collection of [VendorQuestionnaireSectionResource](vendorquestionnairesectionresource)
1 property 1 required
VendorQuestionnaireResource
object
4 properties
VendorFileCreateRequest
object
1 property
VendorResponse
object
A JSON-API document with a single [VendorResource](vendorresource) resource
2 properties 1 required
VendorCreateRequest
object
1 property
VendorQuestionnaireSectionEvidenceCreateRequest
object
1 property
VendorQuestionnaireCreateRequest
object
1 property
ModelVendorLinkResource
object
4 properties
ForbiddenError
object
1 property
AuthError
object
1 property
ModelVendorLinkResponse
object
A JSON-API document with a single [ModelVendorLinkResource](modelvendorlinkresource) resource
2 properties 1 required
VendorFilesResponse
object
A collection of [VendorFileResource](vendorfileresource)
1 property 1 required
VendorsResponse
object
A page of [VendorResource](vendorresource) results
2 properties 1 required
VendorEvidenceResource
object
4 properties
VendorQuestionnaireResponse
object
A JSON-API document with a single [VendorQuestionnaireResource](vendorquestionnaireresource) resource
2 properties 1 required
VendorQuestionnairesResponse
object
A collection of [VendorQuestionnaireResource](vendorquestionnaireresource)
1 property 1 required
ModelVendorLinksResponse
object
A page of [ModelVendorLinkResource](modelvendorlinkresource) results
2 properties 1 required
VendorCustomFieldResponse
object
A JSON-API document with a single [VendorCustomFieldResource](vendorcustomfieldresource) resource
2 properties 1 required
NotFoundError
object
1 property
VendorEvidenceResponse
object
A JSON-API document with a single [VendorEvidenceResource](vendorevidenceresource) resource
2 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

credo-ai-vendors-api-openapi.yml Raw ↑

Other APIs Credo AI publishes across the network.

Credo AI Governance Intelligence Pro MCP Server
Credo AI Alerts API
Credo AI Audit Logs API
Credo AI Comment Threads API
Credo AI Entities API
Credo AI Entity Control Assignments API
Credo AI Entity Controls API
Credo AI Entity Evidences API
Credo AI Entity Policy Packs API
Credo AI Entity Risk Scenario Controls API
Credo AI Entity Risk Scenarios API
Credo AI Entity Section Assignments API
Where this information came from

This is an independent, third-party profile of Credo AI Vendors API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.