Documentation
How VendorLogic works, flow by flow and page by page, for the people who use it and the systems that connect to it.
Flows
How a task goes from start to finish.
- Customer applyingHow a customer opens a supplier's link, completes the two-step application, signs it and submits it.
- Reference respondingHow a trade reference answers a request through a private link, or declines, without creating an account.
- Signing a documentHow a person signs or declines a credit agreement or personal guaranty through a private emailed link, without an account.
- Supplier invitationHow a customer invites one of its suppliers to join VendorLogic, and what the supplier sees on the invitation link.
- Credit decisionHow a credit manager reviews an application and records a signed approve, decline or counter-offer decision.
- Team and permissionsHow an organization administrator invites teammates and changes roles, permissions and access at Users and roles.
- Deleting a workspace or an accountHow owners, staff and members delete a workspace or an account, what is removed at once, what is kept for credit-law retention, and how legal holds work.
Pages
What each screen is for and who can use it.
- Public site pagesThe public pages that need no sign-in: guide, pricing, support, privacy, terms, status, roadmap and changelog.
- Sign in and sign upHow people sign in at /login, why /signup only redirects, and where each role lands afterwards.
- Post-login routingThe /post-login page that decides where a signed-in person goes next, by role and organization.
- OnboardingWhere a new signed-in person creates their business as a supplier or a customer organization at /onboarding.
- Business sidesThe /account/workspaces page where one business enables its customer side or requests its supplier side.
- Product guideThe public guide at /guide: what suppliers, customers and references do, in order, and where to start.
- Credit applications listThe supplier credit desk at /applications: what waits for you, late references, the decided count, the oldest waiting, and the list with status tabs, filters, sortable columns and a bulk reminder.
- Application formOne page where a supplier builds its credit application, writes its marketplace listing, shares the apply link and QR codes, and emails customers an invitation.
- FormsThe supplier's library of extra forms to ask an applicant for, after the credit application. Create one by name, then build it with the assistant.
- References listThe supplier's view of every trade reference requested across its applications, pending, answered or closed.
- Form builderDescribe the questions you need to an assistant, see the form take shape in a live preview, then save and publish it.
- Messages inboxThe supplier inbox at /messages, one list of conversations with applicants and references, read first and written from a dialog.
- Application detailThe page where a credit team reads one application, its references, documents and messages, and records a decision.
- Connectors pageThe /connectors page where an organization reviews drafts that connectors sent and installs or removes connectors.
- NotificationsThe supplier notification feed at /notifications for the last 30 days, grouped by day, with filters and read state.
- Account settingsSettings is one page with tabs for your profile, email, security and data, and, for the people who can use them, the organization, signing terms, the team and workspace deletion.
API and agents
Endpoints, the MCP server and the connect API.
- Onboarding steps and gatesThe ordered "Finish setting up" steps for a customer or supplier business, how each is derived, and which actions wait for which step.
- MCP server for agentsConnect Claude, ChatGPT or Cursor to VendorLogic over remote MCP with OAuth: who may use it, the tools per role, staff proof, audit attribution, rate limits and errors.
- Agent access pageWhere a person finds the MCP address, the tools their assistant gets, and what agents did for them, and what the page can and cannot show about tokens.
- Applications and credit decisions APISubmit a signed credit application (public) and record, list and read credit decisions (credit team): routes, who may call, validation, errors.
- References APIAdd, correct and remind trade references (applicant and credit team), answer by private link (public), and the reference portal reads.
- Signatures APISend a credit agreement or personal guaranty for signature, sign it on an emailed link, and read the sealed copy: routes, states, permissions, errors.
- Profile and account APIRead and edit your profile, business details and saved signature, and download your personal data.
- Team and users APIOrganization admins invite and manage teammates; super admins suspend users and revoke sessions.
- Organizations and membershipsOne person can belong to several organizations with a separate role in each; switching, invitations, leaving and the single sign-on rule.
- CSV exports APICredit teams download their organization's applications and references as CSV.
- Business verification (KYB)How an organization administrator verifies the business with Didit, and how the signed webhook moves the status.
- Documents APIUpload, download and remove application documents, for signed-in users and for references with a private link.
- Messages and notifications APIApplication messages between supplier, applicant and reference, the inbox, and the notification bell.
- Invitations APICustomers invite their suppliers, suppliers invite customers, and an invited business accepts.
- Search and sales QR link APIThe command-palette search and the personal sales-rep application link.
- Supplier workspace read APIRead endpoints behind the supplier (credit team) pages: pipeline, application detail, references, messages, builder, team overview, QR and invite.
- Supplier listing APIRead and save the optional tagline and rich text a supplier shows to customers in the Find vendors marketplace.
- Supplier terms APIWrite, preview, publish and retire the terms of sale and guaranty wording a supplier sends with its credit agreements.
- Supplier finder APISearch for businesses, enrich a website, and start an application with a participating supplier.
- AI assist APIPipeline and reference summaries, application assist drafts, and public scan-to-fill, all through the configured model gateway.
- Forms APISuppliers design and publish forms with an assistant, ask an applicant to fill one in on an application, and read the submitted answers.
Security and data
Access, evidence and how personal data is handled.
- Roles and permissionsHow the API decides: permission keys, the staff-editable role matrix, per-person lists, own or organization scope, the staff flag.
- Audit trail and evidenceWhat is recorded when state changes, how decisions and reference responses stay tamper-evident, and who may read the audit log.
- Personal dataWhere personal data lives, who can read it, what is masked, exported or logged, and the rules new code follows.
- Assign roles from your identity providerHow a vendor's IT admin makes company SSO users Owner, Administrator, Credit Manager or Salesman by putting them in groups in authentik (or any OIDC provider) and mapping the groups in WorkOS.