Customers API

Scopes: customers.read / customers.write

List / get

GET /v1/customers?updated_since=...&limit=100&cursor=...
GET /v1/customers/{id}

Create / update

POST /v1/customers
PATCH /v1/customers/{id}

Respect marketing consent fields; do not invent lawful basis for ESP sends.

Webhooks: customer.created | customer.updated.

DSR / erasure: merchants use BO/DSR tooling; partners must honour deletion signals (Enterprise may expose customer.deleted / redaction events).