---
title: "List vendors"
method: GET
path: "/v1/vendors"
tags: ["Vendors"]
---

# List vendors

`GET /v1/vendors`

List third-party vendors with risk level, owner, assessment status, and Trust Center visibility for vendor risk management.

## Response `200`

Vendors retrieved successfully

- object
  - `data` object[]
    - `id` string — Vendor ID
    - `name` string — Vendor name
    - `description` string — Vendor description
    - `category` 'cloud' | 'infrastructure' | 'software_as_a_service' | 'finance' | 'marketing' | 'sales' | 'hr' | 'other'
    - `status` 'not_assessed' | 'in_progress' | 'assessed'
    - `inherentProbability` 'very_unlikely' | 'unlikely' | 'possible' | 'likely' | 'very_likely'
    - `inherentImpact` 'insignificant' | 'minor' | 'moderate' | 'major' | 'severe'
    - `residualProbability` 'very_unlikely' | 'unlikely' | 'possible' | 'likely' | 'very_likely'
    - `residualImpact` 'insignificant' | 'minor' | 'moderate' | 'major' | 'severe'
    - `website` string, nullable
    - `assigneeId` string, nullable — ID of the user assigned to manage this vendor
    - `createdAt` string, date-time — When the vendor was created
    - `updatedAt` string, date-time — When the vendor was last updated
  - `count` number — Total number of vendors
  - `authType` 'api-key' | 'session' — How the request was authenticated
  - `authenticatedUser` object — User information (only for session auth)
    - `id` string
    - `email` string

## Other responses

- `401` — Unauthorized - Invalid authentication or insufficient permissions
- `404` — Organization not found
- `500` — Internal server error

---

[API](https://skmtc.net/om-network/apis/betayum-api.md) · [All operations](https://skmtc.net/om-network/apis/betayum-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/om-network/betayum-api/revisions/1c5403653ecf/schema)