For Agents

mkdir -p .claude/skills/vendorstacks
curl -s https://vendorradar-production.up.railway.app
/skill \
  -o .claude/skills/vendorstacks/SKILL.md

{
  "type": "function",
  "function": {
    "name": "vendorstacks_check_entity",
    "description": "Look up whether an entity (by domain) publishes a subprocessor/DPA disclosure and which vendors it names, as a structured vendor stack across 13 categories with quoted evidence. Every lookup costs 1 credit flat: indexed answers return <1s, unindexed domains live-scan automatically (15-90s, same price) — use a 120s timeout. fresh=true forces a re-scan of an indexed domain at the same price. found=false means no disclosure was located, NOT that the entity uses no vendors.",
    "parameters": {
      "type": "object",
      "properties": {
        "url": { "type": "string", "description": "Domain, e.g. acme.com" },
        "fresh": { "type": "boolean", "description": "Force live re-scan. Default false." }
      },
      "required": ["url"]
    }
  }
}

import OpenAI from "openai";
const client = new OpenAI();

const response = await client.responses.create({
  model: "gpt-5",
  input: "What vendors does notify-hq.com disclose?",
  tools: [vendorstacksTool], // the schema above
});

for (const item of response.output) {
  if (item.type === "function_call" && item.name === "vendorstacks_check_entity") {
    const { url, fresh } = JSON.parse(item.arguments);
    const data = await fetch(
      `https://vendorradar-production.up.railway.app
/v1/check?url=${encodeURIComponent(url)}` + (fresh ? "&fresh=true" : ""),
      { headers: { Authorization: `Bearer ${process.env.VENDORSTACKS_KEY}` } },
    ).then(r => r.json());
    // feed `data` back as the function_call_output item
  }
}

{
  "name": "vendorstacks_check_entity",
  "description": "Look up whether an entity (by domain) publishes a subprocessor/DPA disclosure and which vendors it names, as a structured vendor stack across 13 categories with quoted evidence. Every lookup costs 1 credit flat: indexed answers return <1s, unindexed domains live-scan automatically (15-90s, same price) — use a 120s timeout. fresh=true forces a re-scan of an indexed domain at the same price. found=false means no disclosure was located, NOT that the entity uses no vendors.",
  "input_schema": {
    "type": "object",
    "properties": {
      "url": { "type": "string", "description": "Domain, e.g. acme.com" },
      "fresh": { "type": "boolean", "description": "Force live re-scan. Default false." }
    },
    "required": ["url"]
  }
}

import Anthropic from "@anthropic-ai/sdk";
const anthropic = new Anthropic();

const msg = await anthropic.messages.create({
  model: "claude-sonnet-4-5",
  max_tokens: 1024,
  tools: [vendorstacksTool], // the definition above
  messages: [{ role: "user", content: "Vet notify-hq.com's subprocessors." }],
});

const call = msg.content.find(b => b.type === "tool_use");
if (call) {
  const { url, fresh } = call.input;
  const data = await fetch(/* same fetch as the OpenAI example */);
  // return as { type: "tool_result", tool_use_id: call.id, content: JSON.stringify(data) }
}

import os, requests
from langchain_core.tools import tool

@tool
def vendorstacks_check_entity(url: str, fresh: bool = False) -> dict:
    """Look up whether an entity (by domain) publishes a subprocessor/DPA disclosure and which vendors it names, as a structured vendor stack across 13 categories with quoted evidence. Every lookup costs 1 credit flat: indexed answers return <1s, unindexed domains live-scan automatically (15-90s, same price) — use a 120s timeout. fresh=true forces a re-scan of an indexed domain at the same price. found=false means no disclosure was located, NOT that the entity uses no vendors."""
    r = requests.get(
        "https://vendorradar-production.up.railway.app
/v1/check",
        params={"url": url, **({"fresh": "true"} if fresh else {})},
        headers={"Authorization": f"Bearer {os.environ['VENDORSTACKS_KEY']}"},
        timeout=120 if fresh else 15,
    )
    if r.status_code == 402:
        body = r.json()
        return {"needs_human": True, "topup_url": body["topup_url"],
                "credits_needed": body["credits_needed"]}
    return r.json()

import os, requests
from llama_index.core.tools import FunctionTool

def check_entity(url: str, fresh: bool = False) -> dict:
    """Look up whether an entity (by domain) publishes a subprocessor/DPA disclosure and which vendors it names, as a structured vendor stack across 13 categories with quoted evidence. Every lookup costs 1 credit flat: indexed answers return <1s, unindexed domains live-scan automatically (15-90s, same price) — use a 120s timeout. fresh=true forces a re-scan of an indexed domain at the same price. found=false means no disclosure was located, NOT that the entity uses no vendors."""
    r = requests.get(
        "https://vendorradar-production.up.railway.app
/v1/check",
        params={"url": url, **({"fresh": "true"} if fresh else {})},
        headers={"Authorization": f"Bearer {os.environ['VENDORSTACKS_KEY']}"},
        timeout=120 if fresh else 15,
    )
    return r.json()

vendorstacks_tool = FunctionTool.from_defaults(fn=check_entity,
                                              name="vendorstacks_check_entity")