List vendors
GET /sscs/vendors
Scope sbom:read Plan Growth+
List every tracked software vendor. Takes no filters and is not paginated. Requires the sbom:read scope.
Example
curl "https://api.autociso.io/api/v1/sscs/vendors" \
-H "Authorization: Bearer <your-api-token>"import requests
response = requests.get(
"https://api.autociso.io/api/v1/sscs/vendors",
headers={"Authorization": "Bearer <your-api-token>"},
)
print(response.json())const response = await fetch("https://api.autociso.io/api/v1/sscs/vendors", {
method: "GET",
headers: { "Authorization": "Bearer <your-api-token>" },
});
console.log(await response.json());Response 200
{
"data": [
{
"vendorId": "vendor_example000001",
"orgId": "org_example000001",
"name": "Example Analytics",
"website": "https://vendor.example.com",
"type": "commercial",
"riskTier": 2,
"assessmentStatus": "in_progress",
"createdAt": "2026-03-02T11:20:05Z",
"updatedAt": "2026-09-05T08:41:12Z"
}
]
}Returns
The data field of the standard { data, error, meta } envelope:
An array of object:
vendorIdstringorgIdstring requirednamestring requiredwebsitestringtypestring required"oss" | "commercial" | "internal"riskTierinteger required1 is the highest risk.1 | 2 | 3assessmentStatusstring required"not_started" | "in_progress" | "completed"lastAssessedAtstring (date-time)notesstringcreatedAtstring (date-time) requiredupdatedAtstring (date-time) required
Errors
| Status | Code | Retry | Meaning |
|---|---|---|---|
| 401 | INVALID_TOKEN |
no | Missing (UNAUTHORIZED) or invalid, expired or revoked (INVALID_TOKEN) token. |
| 402 | FEATURE_GATED |
no | The tenant plan does not include supply chain security. code FEATURE_GATED; args.feature, args.minTier, args.minTierName. |
| 403 | INSUFFICIENT_SCOPE |
no | The token lacks the required scope (INSUFFICIENT_SCOPE) or the request is refused (FORBIDDEN). |
| 429 | RATE_LIMITED |
yes | Too many failed authentication attempts from this address. code RATE_LIMITED; wait Retry-After seconds. |
| 500 | DB_ERROR |
no | Unexpected server error. code DB_ERROR (or VALIDATION_ERROR when the request could not be validated); quote error.id to support. |
| 503 | BILLING_UNAVAILABLE |
yes | Billing is temporarily unavailable, so the plan could not be checked. code BILLING_UNAVAILABLE. Retry later. |
Last reviewed: 2026-10-13
Was this page helpful?