---
title: "List Vendors"
method: GET
path: "/v1.0/vendor/list"
tags: ["Vendor"]
---

# List Vendors

`GET /v1.0/vendor/list`

Returns the vendor directory for the team .Notes:
- Scope: the list is scoped to the caller's team (teamId is resolved from the token).
- Ordering is not guaranteed; do not rely on a specific sort order.
- Only the fields defined in VendorInfo are exposed; internal fields are not returned.
- The response is a bare JSON array; empty array when the team has no vendors.

## Headers

- `Authorization` string, required

## Response `200`

Vendor list for the caller's team. Empty array when the team has no vendors.

- VendorInfo[]
  - `id` integer — Internal vendor record ID, stable within the team. Distinct from the OAuth vendorId used for authentication.
  - `agentUserId` integer — CRM user ID of the agent this vendor entry represents. 0 or null means the vendor is not linked to a CRM user account (e.g. external contractor-only entries).
  - `firstName` string — Given name of the vendor.
  - `lastName` string — Family name of the vendor.
  - `phoneNumber` string — Phone number, local subscriber part only (without country or area prefix). Combine with phoneCode and phoneCountry to reconstruct the full E.164 number.
  - `phoneCode` string — Phone country calling code, digits only, no leading '+'.
  - `phoneCountry` string — ISO 3166-1 alpha-2 country code of the phone number.
  - `email` string — Primary email address of the vendor. May be empty when no email is on file.
  - `roleName` string — Human-readable role name of the vendor within the team (e.g. 'Agent', 'Admin', 'Lender', 'Transaction Coordinator'). Internal role codes are not exposed.
  - `companyName` string — Company or brokerage name the vendor belongs to. May be empty.
  - `companyAddress` string — Street address of the vendor's company, free-form single line. May be empty.

## Other responses

- `400` — Permission denied (error code 20017 PERMISSION_DENIED). The token is valid but the authorization scope does not allow listing team vendors.
- `401` — Authentication failed. Token is missing, malformed, expired or revoked.
- `500` — Internal server error.

---

[API](https://skmtc.net/lofty/apis/lofty-service-open-apis.md) · [All operations](https://skmtc.net/lofty/apis/lofty-service-open-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lofty/lofty-service-open-apis/versions/23e640467118/schema)