> ## Documentation Index > Fetch the complete documentation index at: https://docs.usecroma.com/llms.txt > Use this file to discover all available pages before exploring further. # El Salvador COMPRASAL Suppliers Search > Search COMPRASAL's supplier register, the suppliers registered to sell to El Salvador's public sector, by name or trade name. Matched by spelling: typos, accents and the legal form do not get in the way, best match first, each with a `score`. Filter to suppliers flagged as sanctioned with `sanctioned_only`. Use a result's `id` with the supplier profile, the awards search and the tender match. Served by Croma (`as_of` says how current the data is). **Dataset endpoint**: answers from the whole source in milliseconds and carries `as_of`. ## OpenAPI ````yaml /api-reference/openapi.json post /sv/comprasal-sv/suppliers-search/v1 openapi: 3.1.0 info: title: Croma Marketplace API version: 1.0.0 description: >- Government-data APIs for Colombia, Peru, Mexico, United States, Brazil, El Salvador, Bolivia, and Japan, plus global web search. Croma normalizes public-sector data into structured JSON for product teams and AI agents. Every operation is a POST with a JSON body and an organization API key as a bearer token; every operation is an idempotent lookup and accepts an optional `Idempotency-Key` header. Paths carry their major version (`/v1`); the versioning and deprecation policy, including the `Deprecation` and `Sunset` headers a retiring endpoint sends, is at https://docs.usecroma.com/versioning. Rate limits are per organization and reported on every response (`RateLimit-Policy`, `X-RateLimit-*`): https://docs.usecroma.com/rate-limits. termsOfService: https://usecroma.com/en/terms contact: name: Croma support url: https://usecroma.com/en/support email: support@usecroma.com servers: - url: https://api.croma.run security: [] paths: /sv/comprasal-sv/suppliers-search/v1: post: tags: - El Salvador - COMPRASAL (DINAC) summary: El Salvador COMPRASAL Suppliers Search description: >- Search COMPRASAL's supplier register, the suppliers registered to sell to El Salvador's public sector, by name or trade name. Matched by spelling: typos, accents and the legal form do not get in the way, best match first, each with a `score`. Filter to suppliers flagged as sanctioned with `sanctioned_only`. Use a result's `id` with the supplier profile, the awards search and the tender match. Served by Croma (`as_of` says how current the data is). **Dataset endpoint**: answers from the whole source in milliseconds and carries `as_of`. operationId: comprasal_sv_suppliers_search parameters: - $ref: '#/components/parameters/IdempotencyKey' requestBody: required: true content: application/json: schema: type: object required: [] properties: query: type: string maxLength: 200 default: '' description: >- Optional supplier name or trade name, e.g. `Textiles Varios`. Matched by spelling, so typos, accents and the legal form do not get in the way; best match first. sanctioned_only: type: boolean default: false description: When true, only suppliers COMPRASAL flags as sanctioned. page: type: integer minimum: 1 maximum: 1000 default: 1 description: 1-based page number for paginated results. per_page: type: integer minimum: 1 maximum: 100 default: 20 description: Results per page (1-100). additionalProperties: false example: query: Textiles Varios responses: '200': description: Successful response headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Policy: $ref: '#/components/headers/RateLimit-Policy' Idempotency-Key: $ref: '#/components/headers/Idempotency-Key' Deprecation: $ref: '#/components/headers/Deprecation' Sunset: $ref: '#/components/headers/Sunset' X-RateLimit-Limit: $ref: '#/components/headers/X-RateLimit-Limit' X-RateLimit-Remaining: $ref: '#/components/headers/X-RateLimit-Remaining' X-RateLimit-Reset: $ref: '#/components/headers/X-RateLimit-Reset' X-Cache: $ref: '#/components/headers/X-Cache' content: application/json: schema: $ref: '#/components/schemas/ComprasalSvSuppliersSearchResponse' '400': description: Invalid request body headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Policy: $ref: '#/components/headers/RateLimit-Policy' Idempotency-Key: $ref: '#/components/headers/Idempotency-Key' Deprecation: $ref: '#/components/headers/Deprecation' Sunset: $ref: '#/components/headers/Sunset' content: application/json: schema: $ref: '#/components/schemas/ApiError' '401': description: Missing or invalid API key headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Policy: $ref: '#/components/headers/RateLimit-Policy' Idempotency-Key: $ref: '#/components/headers/Idempotency-Key' Deprecation: $ref: '#/components/headers/Deprecation' Sunset: $ref: '#/components/headers/Sunset' content: application/json: schema: $ref: '#/components/schemas/ApiError' '429': description: Rate limit exceeded headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Policy: $ref: '#/components/headers/RateLimit-Policy' Idempotency-Key: $ref: '#/components/headers/Idempotency-Key' Deprecation: $ref: '#/components/headers/Deprecation' Sunset: $ref: '#/components/headers/Sunset' X-RateLimit-Limit: $ref: '#/components/headers/X-RateLimit-Limit' X-RateLimit-Remaining: $ref: '#/components/headers/X-RateLimit-Remaining' X-RateLimit-Reset: $ref: '#/components/headers/X-RateLimit-Reset' Retry-After: $ref: '#/components/headers/Retry-After' content: application/json: schema: $ref: '#/components/schemas/ApiError' '500': description: Internal error headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Policy: $ref: '#/components/headers/RateLimit-Policy' Idempotency-Key: $ref: '#/components/headers/Idempotency-Key' Deprecation: $ref: '#/components/headers/Deprecation' Sunset: $ref: '#/components/headers/Sunset' content: application/json: schema: $ref: '#/components/schemas/ApiError' '502': description: Upstream source returned an error headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Policy: $ref: '#/components/headers/RateLimit-Policy' Idempotency-Key: $ref: '#/components/headers/Idempotency-Key' Deprecation: $ref: '#/components/headers/Deprecation' Sunset: $ref: '#/components/headers/Sunset' content: application/json: schema: $ref: '#/components/schemas/ApiError' security: - bearerAuth: [] externalDocs: description: Interactive documentation and examples url: https://docs.usecroma.com/guides/el-salvador/compras-publicas components: parameters: IdempotencyKey: name: Idempotency-Key in: header required: false description: >- Optional client-chosen key for this request (any string up to 255 characters, e.g. a UUID). Every Croma operation is an idempotent lookup: repeating a request with the same body returns the same result and creates nothing, so retrying after a timeout or network failure is always safe. The key is echoed back in the `Idempotency-Key` response header so you can correlate a retry with its first attempt. Each attempt that reaches the API counts against the rate limit. schema: type: string maxLength: 255 example: 0f8e9a42-6b7c-4d1e-9a3f-2c5d7e8f9a0b headers: X-Request-Id: description: Unique id for the request (req_…). Include it in support reports. schema: type: string RateLimit-Policy: description: >- Quota policy for this endpoint as an IETF RateLimit-Policy structured field, e.g. `"default";q=100;w=86400` (100 requests per 86400-second window per organization). Endpoints with an extra hourly ceiling list both policies, e.g. `"webSearch";q=100;w=3600, "default";q=100;w=86400`. Present on every response, including 401 and 429. schema: type: string example: '"default";q=100;w=86400' Idempotency-Key: description: >- The `Idempotency-Key` the request carried, echoed back unchanged. Absent when the request sent none. schema: type: string Deprecation: description: >- Present only on an endpoint version scheduled for removal: the date the deprecation took effect (RFC 9745). A `Sunset` header and a `Link` with `rel="successor-version"` accompany it. Policy: https://docs.usecroma.com/versioning schema: type: string example: '@1767225600' Sunset: description: >- Present only on an endpoint version scheduled for removal: the date after which it answers 410 (RFC 8594). Announced in the changelog at least 90 days ahead. schema: type: string format: date-time example: Wed, 01 Apr 2026 00:00:00 GMT X-RateLimit-Limit: description: Requests allowed in the current window. schema: type: integer X-RateLimit-Remaining: description: Requests left before you are throttled. schema: type: integer X-RateLimit-Reset: description: ISO 8601 timestamp when the window resets. schema: type: string format: date-time X-Cache: description: >- HIT or MISS. Cached hits spend no credits, but still count toward an hourly ceiling. schema: type: string enum: - HIT - MISS Retry-After: description: Seconds to wait before retrying. schema: type: integer schemas: ComprasalSvSuppliersSearchResponse: type: object required: - data properties: data: $ref: '#/components/schemas/ComprasalSvSuppliersSearchData' ApiError: type: object required: - error properties: error: type: object required: - type - code - message properties: type: type: string description: >- Broad category: invalid_request_error, authentication_error, not_found_error, rate_limit_error, upstream_error, api_error. code: type: string description: Machine-readable specific code. message: type: string description: Human-readable explanation, safe to surface in UI. param: type: string description: Field that triggered the error. Present on validation errors. details: type: object description: Free-form structured detail. ComprasalSvSuppliersSearchData: type: object properties: as_of: anyOf: - type: string - type: 'null' description: How current the data in this response is. query: type: string sanctioned_only: type: boolean total: type: number description: Matches, counted up to 1000. total_is_exact: type: boolean description: >- False when more than 1000 match: `total` is then 1000, and the pages go on. page: type: number per_page: type: number total_pages: type: number description: Pages over `total`; there are more when `total_is_exact` is false. count: type: number results: type: array items: type: object properties: id: type: string description: >- The supplier's permanent id in COMPRASAL's supplier register, e.g. `392`, the `supplier_id` other endpoints take. name: type: string description: >- The supplier's registered name: a company's legal name, or a person's name for a sole trader. trade_name: anyOf: - type: string - type: 'null' description: The supplier's trade name. sanctioned: type: boolean description: Whether COMPRASAL flags the supplier as sanctioned. score: anyOf: - type: number - type: 'null' description: >- How close the name or trade name is to `query`, 0 to 100. Null without a query. required: - id - name - trade_name - sanctioned - score required: - as_of - query - sanctioned_only - total - total_is_exact - page - per_page - total_pages - count - results securitySchemes: bearerAuth: type: http scheme: bearer description: 'Use Authorization: Bearer YOUR_API_KEY' ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.