API reference.
Read vendors' subprocessors, changes and your team's decisions as JSON.
The API is read-only. Public endpoints return what the vendor directory
publishes and need no key. Workspace endpoints return your own vendors, changes and decisions, and need a key from
Settings → API & MCP, on Pro, Team, and Business. The same data answers your AI assistant through our MCP server.
Base URL and keys
Every path starts with https://clausetrail.com/v1. Send a key as
Authorization: Bearer clausetrail_sk_…. A key you send must be valid,
even on a public endpoint: a wrong or revoked key is refused, never treated as no key.
Pages and limits
Lists come in pages: total, count,
offset, has_more and, when there is more,
next_offset. Times are ISO 8601 in UTC; vendors and companies are named by slug.
Without a key you get 30 requests a minute, with one 120.
Public endpoints
Search the catalog
GET /v1/vendors
Public. No key needed; a key raises the rate limit.
The vendors whose documents ClauseTrail tracks, alphabetically.
Returns vendors: slug, name, domain, category, website, when its list was last extracted and changed, and its directory page.
Parameter
Meaning
q
A name or domain fragment, e.g. stripe or atlassian.com.
category
A category name, e.g. Payments (any case).
limit
How many to return, 25 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
Public. No key needed; a key raises the rate limit.
The vendor's latest subprocessor list, in its own order and wording.
Returns subprocessors: name, purpose, locations and data categories as the vendor lists them, and the company behind the name once we've reviewed it, with its AI-provider flag. list: the source URL and when we read it.
Parameter
Meaning
limit
How many to return, 100 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
Public. No key needed; a key raises the rate limit.
The changes published for the vendor, the latest first.
Returns changes: id, type, label, severity, editorial (a wording-only edit to a document), summary, detected_at, published_at, the objection deadline (and whether it's estimated), the document and the company it names.
Parameter
Meaning
since
Only changes published at or after this date or time (ISO 8601, e.g. 2026-09-01 or 2026-09-01T08:00:00Z).
limit
How many to return, 50 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
Public. No key needed; a key raises the rate limit.
The companies the vendor's latest list names, one row per company, alphabetically.
Returns dependencies: each company (name, domain, AI-provider flag, and its vendor and company pages when we have them), with the purpose, locations and data categories the list gives it and when it first and last appeared. pending_review: companies the list names that we haven't reviewed yet.
Parameter
Meaning
ai_only
true for AI providers only.
limit
How many to return, 100 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
Public. No key needed; a key raises the rate limit.
The vendors whose latest list names a company (a subprocessor), and those whose lists no longer do.
Returns company, then vendors and former_vendors: each vendor with the purpose, locations and data categories its list gives the company, and when the company first and last appeared on it.
Parameter
Meaning
limit
How many to return, 100 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
The vendors your workspace tracks, alphabetically.
Returns vendors: the catalog fields, plus tracked_since, changes_to_review, the documents we watch, and the AI terms, DPA terms and certifications we've read (null when the documents don't say).
Parameter
Meaning
limit
How many to return, 50 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
The changes published for the vendors your workspace tracks, the latest first, with your team's decisions.
Returns changes: as for a vendor's changes, plus status (to_review, reviewed, accepted, objected or before_tracking), the current decision (status, note, decided_by, decided_at) and the change's page in ClauseTrail.
Parameter
Meaning
status
One of to_review, reviewed, accepted, objected.
since
Only changes published at or after this date or time (ISO 8601, e.g. 2026-09-01 or 2026-09-01T08:00:00Z).
limit
How many to return, 50 unless you ask (at most 100).
offset
How many to skip. Pass back next_offset from the previous page.
Your tracked vendors and the companies their latest lists name, as nodes and edges.
Returns nodes: each vendor you track and each company they name (id, type, name, slug, domain, ai_provider, used_by); a company that is one of your vendors is that vendor's node. edges: source and target ids, with the purpose, locations and data categories the list gives.
Parameter
Meaning
min_vendors
Only companies at least this many of your vendors name (default 1: the whole graph).