---
title: "List suppliers"
method: GET
path: "/v1/supplychains/{supply_chain_id}/suppliers"
tags: ["Supplier Risk"]
---

# List suppliers

`GET /v1/supplychains/{supply_chain_id}/suppliers`

## Request

- Base URL: `https://api.platform.censys.io`
- URL: `https://api.platform.censys.io/v1/supplychains/{supply_chain_id}/suppliers`
- Auth: HTTP bearer

Retrieve a paginated list of all suppliers in your supply chain. Use `default` as the supply chain ID to target your organization's primary supply chain.<br><br>This endpoint does not cost credits to execute.

## Path parameters

- `supply_chain_id` string, required: The ID of a Censys supply chain, or the literal 'default' for your organization's primary supply chain. Obtain the supply chain ID using the [list supply chains endpoint](https://docs.censys.com/reference/v1-supply-chain-list-supply-chains#/) or from the Supplier Risk URL in the web console.

## Query parameters

- `organization_id` string, uuid, required: The ID of a Censys organization to associate the request with. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information.
- `page_size` integer: Maximum number of suppliers to return per page.
- `page_token` string: Pagination token from a previous response to retrieve the next page of results.
- `order_by` 'name_asc' | 'name_desc' | 'created_at_asc' | 'created_at_desc': Returned values ordering. Can sort by name and created at time and can order by ascending and descending results.

## Headers

- `X-Organization-ID` string, uuid: The ID of a Censys organization to associate the request with. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

## Response `200`

Supplier information returned successfully

- ResponseEnvelopeListSuppliersPayload
  - `result` ListSuppliersPayload
    - `next_page_token` string: Pagination token for the next page of results, if any.
    - `suppliers` SupplyChainSupplier[], nullable, required: Suppliers in the supply chain.
      - `city` string, nullable: Supplier headquarters city.
      - `continent` string, nullable: Supplier headquarters continent.
      - `country` string, nullable: Supplier headquarters country.
      - `created_at` string, date-time, nullable: Time stamp of when a supplier was added to a supply chain. This may not be present if the supplier has not been added to the supply chain.
      - `description` string, nullable: Supplier description.
      - `display_name` string, nullable: Supplier display name.
      - `exposure_count` integer, nullable: Number of exposures affecting the supplier's assets.
      - `id` string, uuid, required: Supplier ID.
      - `legal_name` string, nullable: Supplier legal name.
      - `long_summary` SupplyChainSummary
        - `generated_at` string, date-time, required: Time stamp that corresponding AI summary was generated.
        - `text` string, required: AI generated summary.
      - `matched_assets` integer, nullable: Number of assets associated with the supplier.
      - `misconfig_count` integer, nullable: Number of misconfigurations affecting the supplier's assets.
      - `region` string, nullable: Supplier headquarters region or state.
      - `short_summary` SupplyChainSummary
        - `generated_at` string, date-time, required: Time stamp that corresponding AI summary was generated.
        - `text` string, required: AI generated summary.
      - `status` string, nullable: Status of populating available assets for a Supplier
      - `total_assets` integer, nullable: Count of total assets used to build a risk profile for the supplier
      - `updated_at` string, date-time, nullable: Time stamp of when a supplier's tracked assets may have been most recently updated. This may not be present if the supplier has not been added to the supply chain.
      - `vuln_count` integer, nullable: Number of vulnerabilities affecting the supplier's assets.
      - `website` string, nullable: Supplier website URL.

## Other responses

- `400`: Invalid arguments
- `401`: Request does not contain a valid Authorization token
- `403`: User does not have permission to access this data
- `404`: Resource not found
- `409`: Conflict
- `422`: Invalid inputs
- `500`: Internal server error

## Changes

- **2026-11-03** `ec1686b0a36a`: 13 breaking, 11 info
  - for the `query` request parameter `order_by`, default value was changed from `id_asc` to `name_asc`
  - removed the enum value `id_asc` from the `query` request parameter `order_by`
  - removed the enum value `id_desc` from the `query` request parameter `order_by`
  - removed the enum value `updated_at_asc` from the `query` request parameter `order_by`
  - …20 more

[Operation history](https://skmtc.dev/censys/apis/censys-platform-api/changes/v1/supplychains/:supply_chain_id/suppliers/get.md)

---

[API](https://skmtc.dev/censys/apis/censys-platform-api.md) - [All operations](https://skmtc.dev/censys/apis/censys-platform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/censys/apis/censys-platform-api/revisions/ec1686b0a36a?raw)