intelliGRC Tools
igrc_ · 33 tools · Free 25 · Pro 8
Static custom-header auth (x-client-id / x-client-secret / x-tenant-id + x-api-version:1.0); no OAuth, no token endpoint, no refresh; default base https://api.intelligrc.app (prod), InstanceUrl overrides to a sandbox host; the x-tenant-id default comes from the credential and each tool takes an optional tenantId override (discover ids via igrc_list_tenants); no documented pagination; evidence upload is multipart/form-data; mixed int/GUID id types per entity; raw JSON passthrough.
Lookups
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_lookup_action_plan_categories |
Free | Read-only | [intelliGRC] List the Action Plan category reference values (id + name). Use the ids when creating action-plan projects/tasks/subtasks. Optional tenantId overrides the credential's default intelliGRC tenant for this call (discover tenants with igrc_list_tenants). |
igrc_lookup_action_plan_levels_of_effort |
Free | Read-only | [intelliGRC] List the Action Plan level-of-effort reference values (id + name), used for the levelOfEffortId field on action-plan projects/tasks/subtasks. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_priority_levels |
Free | Read-only | [intelliGRC] List the Action Plan priority-level reference values (id + name), used for the priorityLevelId field on action-plan projects/tasks/subtasks. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_project_statuses |
Free | Read-only | [intelliGRC] List the Action Plan project-status reference values (id + name), used for the statusId field when creating an action-plan project (igrc_create_action_plan_project). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_subcategories |
Free | Read-only | [intelliGRC] List the Action Plan subcategory reference values (id + name), used for the subCategoryId field on action-plan projects/tasks/subtasks. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_subtask_statuses |
Free | Read-only | [intelliGRC] List the Action Plan subtask-status reference values (id + name), used for the statusId field when creating an action-plan subtask (igrc_create_action_plan_subtask). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_task_statuses |
Free | Read-only | [intelliGRC] List the Action Plan task-status reference values (id + name), used for the statusId field when creating an action-plan task (igrc_create_action_plan_task). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_task_types |
Free | Read-only | [intelliGRC] List the Action Plan task-type reference values (id + name), used for the taskTypeId field when creating an action-plan task (igrc_create_action_plan_task). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_assessment_objective_statuses |
Free | Read-only | [intelliGRC] List the Assessment Objective status reference values (id + name), used for the statusId field when updating an assessment objective (igrc_update_assessment_objective). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_boundary_availability_levels |
Free | Read-only | [intelliGRC] List the Boundary availability-level reference values (id + name), used for the availabilityId field when creating a boundary (igrc_create_boundary). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_boundary_confidentiality_levels |
Free | Read-only | [intelliGRC] List the Boundary confidentiality-level reference values (id + name), used for the confidentialityId field when creating a boundary (igrc_create_boundary). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_boundary_information_system_types |
Free | Read-only | [intelliGRC] List the Boundary information-system-type reference values (id + name), used for the systemTypeId / informationSystemTypeId fields when creating a boundary (igrc_create_boundary). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_boundary_integrity_levels |
Free | Read-only | [intelliGRC] List the Boundary integrity-level reference values (id + name), used for the integrityId field when creating a boundary (igrc_create_boundary). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_boundary_operational_statuses |
Free | Read-only | [intelliGRC] List the Boundary operational-status reference values (id + name), used for the operationalStatusId field when creating a boundary (igrc_create_boundary). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_lookup_action_plan_categories parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_levels_of_effort parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_priority_levels parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_project_statuses parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_subcategories parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_subtask_statuses parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_task_statuses parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_action_plan_task_types parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_assessment_objective_statuses parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_boundary_availability_levels parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_boundary_confidentiality_levels parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_boundary_information_system_types parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_boundary_integrity_levels parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_lookup_boundary_operational_statuses parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
Action Plan
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_create_action_plan_project |
Pro | Write | [intelliGRC] Create an Action Plan project. Provide a JSON object body — typical fields: name (string), evaluationId (integer), statusId (integer, from igrc_lookup_action_plan_project_statuses), description (string), costEstimate (number), dueDate (ISO-8601), levelOfEffortId / priorityLevelId / subCategoryId (integers, from the matching igrc_lookup_action_plan_* tools). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_create_action_plan_subtask |
Pro | Write | [intelliGRC] Create an Action Plan subtask under a parent task. Provide a JSON object body — typical fields: title (string), description (string), taskId (GUID string — the parent task id), statusId (integer, from igrc_lookup_action_plan_subtask_statuses), costEstimate (number), scheduledCompletionDate (ISO-8601), assignedDepartmentIds / assignedPersonnelIds / assignedWatcherIds (arrays, nullable), levelOfEffortId / priorityLevelId / subCategoryId (integers), isAssignedToOrganization (bool). NOTE: taskId is a GUID here, unlike the integer ids elsewhere in Action Plan. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_create_action_plan_task |
Pro | Write | [intelliGRC] Create an Action Plan task. Provide a JSON object body — typical fields: name (string), description (string), statusId (integer, from igrc_lookup_action_plan_task_statuses), taskTypeId (integer, from igrc_lookup_action_plan_task_types), projectId / evaluationId (integers, nullable), budget, scheduledCompletionDate (ISO-8601), assignedDepartmentIds / assignedPersonnelIds / assignedWatcherIds / assignedAssessmentObjectiveIds (arrays, nullable), levelOfEffortId / priorityLevelId / subCategoryId (integers, nullable), isAssignedToOrganization (bool). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_list_action_plan_projects |
Free | Read-only | [intelliGRC] List Action Plan projects, optionally filtered to one evaluation and optionally expanding their tasks and subtasks. evaluationId is an integer (from igrc_list_evaluations / igrc_get_current_evaluation). Optional tenantId overrides the credential's default intelliGRC tenant for this call (see igrc_list_tenants). |
igrc_list_action_plan_subtasks |
Free | Read-only | [intelliGRC] List Action Plan subtasks, optionally filtered to one evaluation. evaluationId is an integer (from igrc_list_evaluations / igrc_get_current_evaluation). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_list_action_plan_tasks |
Free | Read-only | [intelliGRC] List Action Plan tasks, optionally filtered to one evaluation and optionally expanding their subtasks. evaluationId is an integer (from igrc_list_evaluations / igrc_get_current_evaluation). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_create_action_plan_project parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
fieldsJson |
string | yes | JSON object body. Typical fields: name, evaluationId (int), statusId (int), description, costEstimate, dueDate (ISO-8601), levelOfEffortId/priorityLevelId/subCategoryId (ints). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_create_action_plan_subtask parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
fieldsJson |
string | yes | JSON object body. Typical fields: title, description, taskId (GUID string — the parent task), statusId (int), scheduledCompletionDate (ISO-8601), assigned*Ids (arrays, nullable), levelOfEffortId/priorityLevelId/subCategoryId (int), isAssignedToOrganization (bool). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_create_action_plan_task parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
fieldsJson |
string | yes | JSON object body. Typical fields: name, description, statusId (int), taskTypeId (int), projectId/evaluationId (int, nullable), scheduledCompletionDate (ISO-8601), assigned*Ids (arrays, nullable), levelOfEffortId/priorityLevelId/subCategoryId (int, nullable), isAssignedToOrganization (bool). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_action_plan_projects parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
evaluationId |
integer | no | null | Optional evaluation id (integer) to filter projects to one evaluation. |
includeSubTasks |
boolean | no | null | Optional. When true, include each task's subtasks in the response. |
includeTasks |
boolean | no | null | Optional. When true, include each project's tasks in the response. |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_action_plan_subtasks parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
evaluationId |
integer | no | null | Optional evaluation id (integer) to filter subtasks to one evaluation. |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_action_plan_tasks parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
evaluationId |
integer | no | null | Optional evaluation id (integer) to filter tasks to one evaluation. |
includeSubTasks |
boolean | no | null | Optional. When true, include each task's subtasks in the response. |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
Assessment Objectives
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_get_assessment_objective_history |
Free | Read-only | [intelliGRC] Get the change history for a single assessment objective. assessmentObjectiveId is a GUID (from igrc_list_assessment_objectives). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_list_assessment_objectives |
Free | Read-only | [intelliGRC] List assessment objectives, optionally filtered by evaluation and/or framework. evaluationId is an integer (from igrc_list_evaluations / igrc_get_current_evaluation); frameworkId is a GUID. Each objective's id is a GUID used by igrc_get_assessment_objective_history and igrc_update_assessment_objective. Optional tenantId overrides the credential's default intelliGRC tenant (see igrc_list_tenants). |
igrc_update_assessment_objective |
Pro | Write | [intelliGRC] Update a single assessment objective (full replace). assessmentObjectiveId is a GUID (from igrc_list_assessment_objectives). Provide a JSON object body — typical fields: evaluationId (integer), statusId (integer, from igrc_lookup_assessment_objective_statuses), implementationDetail (string), findingDetail (string), recommendationDetail (string), validationMethods (string). The API may return 200 with the updated object or 204 with no content. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_get_assessment_objective_history parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
assessmentObjectiveId |
string | yes | The assessment objective id (GUID string, from igrc_list_assessment_objectives). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_assessment_objectives parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
evaluationId |
integer | no | null | Optional evaluation id (integer) to filter objectives to one evaluation. |
frameworkId |
string | no | null | Optional framework id (GUID string) to filter objectives to one framework. |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_update_assessment_objective parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
assessmentObjectiveId |
string | yes | The assessment objective id to update (GUID string, from igrc_list_assessment_objectives). | |
fieldsJson |
string | yes | JSON object body. Typical fields: evaluationId (int), statusId (int), implementationDetail, findingDetail, recommendationDetail, validationMethods. | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
Evidence
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_create_evidence_link |
Pro | Write | [intelliGRC] Attach an external URL as evidence to a parent GRC record. Provide a JSON object body — fields: fileName (string, the display label), url (string), description (string), parentId (GUID string — the record to attach to). Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_list_evidence |
Free | Read-only | [intelliGRC] List all evidence records for the tenant. Optional tenantId overrides the credential's default intelliGRC tenant for this call (see igrc_list_tenants). |
igrc_list_evidence_by_evaluation |
Free | Read-only | [intelliGRC] List evidence for a specific evaluation, optionally narrowed to one framework. evaluationId is a required integer (from igrc_list_evaluations / igrc_get_current_evaluation); frameworkId is an optional GUID. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_upload_evidence_file |
Pro | Write | [intelliGRC] Upload a file as evidence attached to a parent GRC record (multipart/form-data). Provide fileContentBase64 (the file bytes, base64-encoded), fileName (e.g. "evidence.csv"), and parentId (GUID string — the record to attach to); description is optional. A 500 "Upload failed" from intelliGRC usually means a file with the same name already exists on that parent. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_create_evidence_link parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
fieldsJson |
string | yes | JSON object body. Fields: fileName (display label), url, description, parentId (GUID string — the record to attach to). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_evidence parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_evidence_by_evaluation parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
evaluationId |
integer | yes | The evaluation id (integer, required — from igrc_list_evaluations / igrc_get_current_evaluation). | |
frameworkId |
string | no | null | Optional framework id (GUID string) to narrow the evidence to one framework. |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_upload_evidence_file parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
description |
string | no | null | Optional human-readable description of the file. |
fileContentBase64 |
string | yes | The file content, base64-encoded. | |
fileName |
string | yes | The file name, e.g. "evidence.csv". | |
parentId |
string | yes | The parent record id to attach the file to (GUID string). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
Boundaries
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_create_boundary |
Pro | Write | [intelliGRC] Create an information-system boundary. Provide a JSON object body — typical fields: name (string), uniqueIdentifier (string), operationalStatusId / systemTypeId / informationSystemTypeId / confidentialityId / integrityId / availabilityId (integers, from the matching igrc_lookup_boundary_* tools), description / systemEnvironment / networkArchitectureDetails (HTML strings), and frameworkIds (array of GUID strings). Optional-relationship id arrays (deviceIds, locationIds, personnelIds, etc.) may be null. Note: level/status/type ids are integers while frameworkIds are GUIDs. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_list_boundaries |
Free | Read-only | [intelliGRC] List the information-system boundaries defined for the tenant. Each boundary's integer id is used as boundaryId when creating an evaluation (igrc_create_evaluation). Optional tenantId overrides the credential's default intelliGRC tenant for this call (see igrc_list_tenants). |
igrc_create_boundary parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
fieldsJson |
string | yes | JSON object body. Typical fields: name, uniqueIdentifier, operationalStatusId/systemTypeId/informationSystemTypeId/confidentialityId/integrityId/availabilityId (ints), description/systemEnvironment (strings), frameworkIds (array of GUID strings). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_boundaries parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
Evaluations
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_create_evaluation |
Pro | Write | [intelliGRC] Create (start) a new evaluation. Provide a JSON object body — typical fields: name (string), reason (string), boundaryId (integer, from igrc_list_boundaries), startDate / endDate (ISO-8601), totalBudget (number), iclVersionId (GUID string), frameworkIds (array of GUID strings), targetType (integer), previousEvaluationId (integer). Note the mixed id types: boundaryId/targetType/previousEvaluationId are integers while iclVersionId and frameworkIds are GUIDs. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_get_current_evaluation |
Free | Read-only | [intelliGRC] Get the current working evaluation for the tenant (the one most tools default to). Returns the evaluation object including its integer id, which other tools take as evaluationId. Optional tenantId overrides the credential's default intelliGRC tenant for this call (see igrc_list_tenants). |
igrc_list_evaluations |
Free | Read-only | [intelliGRC] List all evaluations for the tenant. Each evaluation's integer id is used as evaluationId across the Action Plan, Assessment Objective, and Evidence tools. Optional tenantId overrides the credential's default tenant (see igrc_list_tenants). |
igrc_create_evaluation parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
fieldsJson |
string | yes | JSON object body. Typical fields: name, reason, boundaryId (int), startDate/endDate (ISO-8601), totalBudget (number), iclVersionId (GUID string), frameworkIds (array of GUID strings), targetType (int), previousEvaluationId (int). | |
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_get_current_evaluation parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
igrc_list_evaluations parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call (see igrc_list_tenants). Omit to use the credential's default tenant. |
Tenants
| Tool | Plan | Access | Description |
|---|---|---|---|
igrc_list_tenants |
Free | Read-only | [intelliGRC] List the intelliGRC tenants the configured API credential can act on. Use a returned tenant id as the optional tenantId parameter on any other intelliGRC tool to target that tenant for a single call; when tenantId is omitted, tools use the credential's stored default tenant. This call is also the connector's credential-validation probe and does not itself require a tenant id. |
igrc_list_tenants parameters
| Param | Type | Required | Default | Description |
|---|---|---|---|---|
tenantId |
string | no | null | Optional intelliGRC tenant id override for this call. Usually omitted for discovery — this endpoint returns the accessible tenants regardless. |