| name | openapi-risk |
| description | Assess the reliability of companies and individuals through Openapi Risk - credit scores, CRIF reports, patrimonial reports, negative events, heirs reports, worldwide KYC (PEP, sanction lists, adverse media). Use for due diligence, creditworthiness, AML/KYC questions. |
Openapi Risk
Base URL: https://risk.openapi.com — reports and scores on natural and legal persons, sourced from CRIF, the Protest Register and other official registers.
Authentication: Bearer token — see the openapi-auth skill.
Credit score (synchronous, start here)
GET /IT-creditscore-top/{vatCode_taxCode_or_id} — top-level score for an Italian companyGET /IT-creditscore-start/… / GET /IT-creditscore-advanced/… — lighter/deeper variantsGET /IT-verifica_cf/{codice_fiscale} — fiscal code check
Reports (async: POST /<type> → GET /<type>/{id} → GET /<type>/{id}/download for the PDF)
| Resource | Subject |
|---|
IT-report-persona, IT-report-persona-top | Natural person report |
IT-patrimoniale-persona, IT-patrimoniale-persona-top | Patrimonial (assets) report |
IT-report-azienda, IT-report-azienda-top | Company report |
IT-crif-persona, IT-crif-azienda | CRIF search (requires a signed delegation: upload via PATCH /{id}, template via GET /{id}/delega) |
IT-eredi-con-accettazione, IT-eredi-senza-accettazione | Heirs reports |
IT-negativita (+ GET /IT-negativita/{id}/dettaglio) | Negative events |
IT-richiesta | Generic request listing/status/download |
Worldwide KYC
POST /WW-kyc-full — full check; targeted: /WW-kyc-pep, /WW-kyc-sanction_list, /WW-kyc-adverse_mediaGET /WW-kyc-evidences, GET /WW-kyc-evidences/{id}, GET /WW-kyc-evidences/{id}/{entity_id} — results and evidencesPOST|GET|DELETE /WW-kyc-full-monitor — continuous KYC monitoring
Compliance
- Several Risk services fall under the Italian TULPS regulation (Art. 6 license): the account must have completed identity-document verification in the console before activation.
- Reports are paid and can be expensive — check wallet credit and confirm with the user before launching them.
- Returned personal data is subject to GDPR: use only for the stated purpose, never store it in the repo.
Full spec: https://console.openapi.com/oas/en/risk.openapi.json
