> For the complete documentation index, see [llms.txt](https://talque.gitbook.io/public/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://talque.gitbook.io/public/json-api/vendors/authorization.md).

# Authorization

By default, the API only returns published vendors. If a vendor is not published, no model is returned with `Reason: "FORBIDDEN"`. The published status is part of the JSON output:

* `isPublished`: When set to false the vendor is not published (yet). Instead it is in preparation, and expected to be visible at some point in the future. 

If you want to read vendors that are not published via the JSON API then you need to pass the API client/secret as HTTP headers as described in the [authentication](/public/webhooks/authentication.md) section. Authorized API requests will also return vendors where `isPublished` is `false`, and you should handle this field accordingly.