---
title: "List fourth party vendors"
method: GET
path: "/fourth_party/list"
tags: ["vendors"]
---

# List fourth party vendors

`GET /fourth_party/list`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/fourth_party/list`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/fourth_party/list/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a paginated list of fourth party (supply chain / concentration risk) vendors and their products
for the watched vendors in your organisation.

Required API key permissions: `VendorRisk` (select when creating API key in Account Settings)

## Query parameters

- `page_size` integer
- `page_token` string
- `labels` string[]
- `tier` integer[]
- `min_score` integer
- `max_score` integer
- `portfolios` string[]

## Response `200`

OK

- GetFourthPartiesV1RespBody
  - `fourth_parties` FourthParty[]
    - `id` integer: The id of the fourth party vendor.
    - `name` string: The name of the fourth party vendor.
    - `primary_hostname` string: The primary hostname of the fourth party vendor.
    - `products` FourthPartyProduct[]: The products provided by this fourth party vendor.
      - `description` string: A description of the product.
      - `link` string: A URL link for the product.
      - `name` string: The name of the product.
      - `tag` string: The category tag of the product.
      - `vendors` FourthPartyWatchedVendor[]: The watched vendors that use this product.
        - `id` integer: The id of the watched vendor.
        - `labels` string[]: The labels applied to the watched vendor.
        - `name` string: The name of the watched vendor.
        - `score` integer: The current score of the watched vendor. A -1 value represents no current score.
        - `tier` integer: The tier of the watched vendor.
    - `score` integer: The current score of the fourth party vendor. A -1 value represents no current score.
    - `vendors` FourthPartyWatchedVendor[]: The watched vendors that use this fourth party (union across all products).
      - `id` integer: The id of the watched vendor.
      - `labels` string[]: The labels applied to the watched vendor.
      - `name` string: The name of the watched vendor.
      - `score` integer: The current score of the watched vendor. A -1 value represents no current score.
      - `tier` integer: The tier of the watched vendor.
  - `next_page_token` string
  - `total_results` integer

## Other responses

- `403`: Your API key does not have permission to perform this action.
- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

## Changes

- **2026-11-07** `d044bf6dc61e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/changes/fourth_party/list/get.md)

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)