Authorization

By default, the API only returns published vendors. If a vendor is not published, no model is returned with Reason: "FORBIDDEN". The published status is part of the JSON output:

• isPublished: When set to false the vendor is not published (yet). Instead it is in preparation, and expected to be visible at some point in the future.

If you want to read vendors that are not published via the JSON API then you need to pass the API client/secret as HTTP headers as described in the authentication section. Authorized API requests will also return vendors where isPublished is false, and you should handle this field accordingly.