List inbound supplier risks

Groups leaks seen at third-party systems accessed with employee accounts. The score uses distinct infected machines, recency, and a critical VPN/SSO/identity-system flag.

GET/v1/supply-chain/inbound

GETList inbound supplier risks

curl -X GET "https://api.darkradar.com/api/public/v1/supply-chain/inbound" \
  -H "x-api-key: $DARKRADAR_API_KEY"

Response

Success

{
  "success": true,
  "data": {
    "items": [
      {
        "domain": "vpn.vendor.example",
        "affectedEmployees": 2,
        "infections": 2,
        "lastSeenAt": "2026-09-20T10:00:00.000Z",
        "severity": "critical",
        "score": 70,
        "grade": "E",
        "ageDays": 0,
        "criticalSystem": true
      }
    ]
  }
}

Access

Scopesupply-chain:read

Plan entitlementapi_access

Responses

200Success

400Invalid request (malformed id, missing or invalid field)

401Key missing, invalid, expired or revoked

403Insufficient scope, no API access in plan, or product not enabled

404Record not found or not owned by this key’s firm

408The request exceeded its maximum response time

429Rate limit exceeded; retry after a minute

Supplier riskResponse model

Response limits

Rate limit500 requests per 15 min · per IP