Vendor token is required