---
title: "Add or update a roster vendor"
method: POST
path: "/api/v1/vendors/roster"
---

# Add or update a roster vendor

`POST /api/v1/vendors/roster`

## Request

- Base URL: `https://scope.bid`
- URL: `https://scope.bid/api/v1/vendors/roster`
- Auth: HTTP bearer

RBAC: roster.write.

## Request body

- object
  - `vendor_org_id` string, required
  - `tier` 'primary' | 'backup' | 'excluded', required
  - `category_slug` string, nullable
  - `notes` string, nullable
  - `locked_until` string, date-time, nullable

## Response `200`

Upserted.

## Other responses

- `403`: The caller is not authorized: the caller's role does not grant the required capability, the partner token lacks the required scope, or the partner is not authorized to act for this firm.

---

[API](https://skmtc.dev/scope/apis/scope-api.md) · [All operations](https://skmtc.dev/scope/apis/scope-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scope/apis/scope-api/revisions/164347b416ac?raw)