REST API

https://portal-demo.tender-lock.co/api/v1

Authorization: Bearer tl_live_YOUR_KEY

{ "error": { "type": "not_found", "message": "Tender not found." } }

Who you are: organisation, key name, scopes and plan.

List your organisation's tenders, newest first. Optional status filter: draft, pending_approval, live, closed, awarded, no_award, cancelled.

Query: status limit

Full detail of one tender: scope, dates, requirements, evaluation criteria and invited suppliers.

Create a DRAFT tender (never published). A person must review, run checks and publish it in TenderLock. closes_at is ISO 8601 in your organisation's time zone, e.g. 2026-11-30T12:00.

Field	Type
title	string	required
description	string	required
closes_at	string	required
category	string	optional
estimated_value	number	optional
requirements	array	optional
criteria	array	optional

Add a supplier to a DRAFT tender. Nothing is sent: invitations go out only when a person publishes the tender.

Field	Type
supplier_name	string	required
email	string	required

Clarification questions and answers for a tender.

Submitted bids for a tender, with prices and weighted scores. Only available after the closing date; bids stay sealed until then.

The append-only audit trail for a tender.

Query: limit

Search your supplier address book by company, email or category.

Query: q limit

Add a supplier to your address book.

Field	Type
company_name	string	required
email	string	required
contact_name	string	optional
category	string	optional

One supplier from your address book with Companies House rating, latest Creditsafe credit check (score, band, limit, turnover, profit, CCJs) and the tenders they were invited to.

Run a Creditsafe credit check on a supplier (Business plan and above). Uses credits; you are not charged if the check fails.

Field	Type
supplier_id	string	required

Blue Team items for a tender: gaps found, suggested fixes and whether each was applied or dismissed.

The latest Red Team stress test for a tender: readiness, summary and every finding with severity, explanation and status.

Who is on the Blue and Red review teams for a tender and the sign-offs recorded.

The companies (entities) in your group, with tender and people counts.

Your team: roles, super admin and owner flags, entities, 2FA, invite status and last sign-in. Key must be created by an owner, super admin or team admin. Optional status: active, invited, disabled.

Query: status

Full audit of one team member: details, roles, entities, 2FA devices, signed-in devices, failed sign-ins, tender stats and recent activity.

Query: limit

Invite someone to your team with one or more roles (role keys or names, e.g. "Evaluator"). Emails the invitation and returns the invite link. Key must be created by an owner, super admin or team admin. Super admin can only be given in TenderLock.

Field	Type
email	string	required
roles	array	required

Your saved tender templates.

Headline reporting numbers: tenders by status, created, published, awarded value, submissions and credits used. Optional days (default 90).

Query: days

Your organisation's plan and current credit balance.

curl -X POST https://portal-demo.tender-lock.co/api/v1/tenders \
  -H "Authorization: Bearer tl_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "title": "Office cleaning, Manchester HQ",
    "description": "Daily office cleaning for a 4,000 sq ft office...",
    "closes_at": "2026-11-30T12:00",
    "estimated_value": 24000,
    "requirements": [
      {"text": "Confirm you hold public liability insurance of at least £5m", "kind": "mandatory"}
    ],
    "criteria": [
      {"name": "Quality", "weight": 60},
      {"name": "Price", "weight": 40, "is_price": true}
    ]
  }'

import requests
r = requests.get("https://portal-demo.tender-lock.co/api/v1/tenders", params={"status": "live"},
                 headers={"Authorization": "Bearer tl_live_YOUR_KEY"})
for t in r.json()["data"]:
    print(t["title"], t["closes_at"])

const res = await fetch("https://portal-demo.tender-lock.co/api/v1/tenders/TENDER_ID/submissions", {
  headers: { Authorization: "Bearer tl_live_YOUR_KEY" }
});
const { data } = await res.json(); // ranked bids with weighted scores