/customers) and entity
customers (companies, trusts, partnerships, SMSFs — KYB, on
/entities).
Base URL
Authentication
Every request requires a bearer API key in theAuthorization header:
Content type
All requests and responses useapplication/json.
Endpoints
Entity endpoints use the same
customers:* scopes — an entity is a
customer record; only its verification track (KYB vs KYC) differs.
OpenAPI
The machine-readable OpenAPI 3.1 spec is available atopenapi.yaml. Import it into Postman, Insomnia,
Stoplight, or your preferred SDK generator.
Conventions
- Identifiers. Customer ids are UUIDs. Wherever a
{id}path parameter appears, you can also pass your ownexternal_id— we detect the format and resolve accordingly. - Timestamps. ISO-8601 with offset (
2026-06-23T01:12:00Z). - Pagination. Cursor-based. See Pagination.
- Idempotency. Pass
Idempotency-Keyon writes. See Idempotency. - Errors. Standard envelope. See Errors.

