Suppliers

GET   /suppliers
POST  /suppliers
GET   /suppliers/{id}
PATCH /suppliers/{id}

name is required. Optional: contact_person, email, phone, website, city, country (max 2), notes, rating (1–5). sla is not part of the API.

portal_token is never returned and cannot be set or read.

curl -X POST https://app.gymmaintain.com/api/v1/suppliers \
  -H "Authorization: Bearer gm_..." -H "Content-Type: application/json" \
  -d '{"name":"FitParts","email":"[email protected]","city":"Utrecht"}'