Get one supplier

GET /suppliers/{supplierId}

Scope supplier:read

Requires the supplier:read scope.

Example

curl "https://api.autociso.io/api/v1/suppliers/<supplierId>" \
  -H "Authorization: Bearer <your-api-token>"

import requests

response = requests.get(
    "https://api.autociso.io/api/v1/suppliers/<supplierId>",
    headers={"Authorization": "Bearer <your-api-token>"},
)
print(response.json())

const response = await fetch("https://api.autociso.io/api/v1/suppliers/<supplierId>", {
  method: "GET",
  headers: { "Authorization": "Bearer <your-api-token>" },
});
console.log(await response.json());

Response 200

{
  "data": {
    "assessmentStatus": "completed",
    "businessOwnerId": "empl_1hgyq2b7z5tc",
    "createdAt": "2026-02-12T09:00:00Z",
    "criticality": "CRITICAL",
    "dependencyType": "single",
    "displayName": "Example Cloud",
    "hasCardData": false,
    "hasPhi": false,
    "hasPii": true,
    "id": "sup_1hd8c2x7q0wn",
    "lastAssessmentAt": "2026-05-20T10:00:00Z",
    "legalName": "Example Cloud Services Ltd.",
    "networkAccessLevel": "privileged",
    "nextAssessmentDueAt": "2027-05-20T00:00:00Z",
    "openFindingCount": 3,
    "openRiskCount": 2,
    "privilegedAccess": true,
    "securityOwnerId": "empl_1hgyun41rx48",
    "serviceCategory": "Cloud Provider",
    "status": "active",
    "supplierOwnerId": "empl_1hgyun41rx48",
    "supportsCrownJewel": true,
    "updatedAt": "2026-10-01T12:00:00Z"
  },
  "error": null
}

Path parameters

supplierId string required

Returns

The data field of the standard { data, error, meta } envelope:

assessmentStatus string required
Assessment status.
businessOwnerId string
Business owner employee id (empl_).
createdAt string (date-time) required
Creation time (UTC).
criticality string required
Criticality.
dependencyType string
Dependency type, when set.
displayName string required
Display name of the supplier.
hasCardData boolean required
Processes card data.
hasPhi boolean required
Processes health data.
hasPii boolean required
Processes personal data.
id string required
Supplier id (sup_).
lastAssessmentAt string (date-time) or null
Last assessment time (UTC).
legalName string required
Legal name of the supplier (an organisation).
networkAccessLevel string
Network access level, when set.
nextAssessmentDueAt string (date-time) or null
Next assessment due (UTC).
openFindingCount integer required
Open findings.
openRiskCount integer required
Open risks.
privilegedAccess boolean required
Has privileged access.
securityOwnerId string
Security owner employee id (empl_).
serviceCategory string required
Service category.
status string required
Lifecycle status.
supplierOwnerId string
Supplier owner employee id (empl_).
supportsCrownJewel boolean required
Supports a crown-jewel asset.
updatedAt string (date-time) required
Last update time (UTC).
No other fields.

Errors

Status	Code	Retry	Meaning
400	-	no	The request is invalid.
401	-	no	The token is missing, malformed, expired or revoked.
402	-	no	The organisation’s plan does not include the feature this route needs.
403	-	no	The token may not use this route.
404	-	no	The resource does not exist in this organisation.
429	-	yes	Rate limit or row budget exceeded; retry after the time in Retry-After.
500	-	no	Unexpected server error.
503	-	yes	A dependency is temporarily unavailable; retry later.

Last reviewed: 2026-10-13

Was this page helpful?