# Openapi Risk

> Assess the reliability of companies and individuals through Openapi Risk - credit scores, CRIF reports, patrimonial reports, negative events, heirs reports, worldwide KYC (PEP, sanction lists, adverse media). Use for due diligence, creditworthiness, AML/KYC questions.

- **Type:** Skill
- **Install:** `agentstack add skill-openapi-openapi-skills-openapi-risk`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [openapi](https://agentstack.voostack.com/s/openapi)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [openapi](https://github.com/openapi)
- **Source:** https://github.com/openapi/openapi-skills/tree/main/skills/openapi-risk
- **Website:** https://openapi.com

## Install

```sh
agentstack add skill-openapi-openapi-skills-openapi-risk
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Openapi Risk

Base URL: `https://risk.openapi.com` — reports and scores on natural and legal persons, sourced from CRIF, the Protest Register and other official registers.

Authentication: Bearer token — see the `openapi-auth` skill.

## Credit score (synchronous, start here)

- `GET /IT-creditscore-top/{vatCode_taxCode_or_id}` — top-level score for an Italian company
- `GET /IT-creditscore-start/…` / `GET /IT-creditscore-advanced/…` — lighter/deeper variants
- `GET /IT-verifica_cf/{codice_fiscale}` — fiscal code check

## Reports (async: `POST /` → `GET //{id}` → `GET //{id}/download` for the PDF)

| Resource | Subject |
|---|---|
| `IT-report-persona`, `IT-report-persona-top` | Natural person report |
| `IT-patrimoniale-persona`, `IT-patrimoniale-persona-top` | Patrimonial (assets) report |
| `IT-report-azienda`, `IT-report-azienda-top` | Company report |
| `IT-crif-persona`, `IT-crif-azienda` | CRIF search (requires a signed delegation: upload via `PATCH /{id}`, template via `GET /{id}/delega`) |
| `IT-eredi-con-accettazione`, `IT-eredi-senza-accettazione` | Heirs reports |
| `IT-negativita` (+ `GET /IT-negativita/{id}/dettaglio`) | Negative events |
| `IT-richiesta` | Generic request listing/status/download |

## Worldwide KYC

- `POST /WW-kyc-full` — full check; targeted: `/WW-kyc-pep`, `/WW-kyc-sanction_list`, `/WW-kyc-adverse_media`
- `GET /WW-kyc-evidences`, `GET /WW-kyc-evidences/{id}`, `GET /WW-kyc-evidences/{id}/{entity_id}` — results and evidences
- `POST|GET|DELETE /WW-kyc-full-monitor` — continuous KYC monitoring

## Compliance

- Several Risk services fall under the Italian **TULPS** regulation (Art. 6 license): the account must have completed identity-document verification in the console before activation.
- Reports are paid and can be expensive — check wallet credit and confirm with the user before launching them.
- Returned personal data is subject to GDPR: use only for the stated purpose, never store it in the repo.

Full spec: https://console.openapi.com/oas/en/risk.openapi.json

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [openapi](https://github.com/openapi)
- **Source:** [openapi/openapi-skills](https://github.com/openapi/openapi-skills)
- **License:** MIT
- **Homepage:** https://openapi.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-openapi-openapi-skills-openapi-risk
- Seller: https://agentstack.voostack.com/s/openapi
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.