Discover the suppliers you may reference in a BoM

GET 
/api/v1/suppliers

Required scope: supplier:read. Returns ONLY the owned-or-linked supplier set (suppliers your company invited, already references in a traceability record, or is linked to via an active membership), each tagged with its source. GDPR-minimised: public registry fields only — never contactEmail / phoneNumber / primaryAddress. Use the returned id as supplierId in a traceability write. Rate-limited per key.

Responses

200

Owned-or-linked suppliers

403

403 — missing scope (FORBIDDEN_SCOPE) or module (FORBIDDEN_MODULE).

429

429 — RATE_LIMITED (per-key limit, reads and writes alike; fails closed, so a limiter outage also returns 429). A limiter-down 429 is deliberately indistinguishable from a quota 429. Carries Retry-After (seconds).

Response Headers

Retry-After

Seconds to wait before retrying (429 only).

RateLimit-Limit

Per-minute request ceiling for this key's tier.

RateLimit-Remaining

Requests left in the current window (floored at 0).

RateLimit-Reset

Seconds until the window resets.

503

503 — the API is not enabled on this environment (FEATURE_DISABLED).