Skip to main content
POST
Create a customer

Authorizations

X-Numero-Api-Key
string
header
required

Your business API key (live_key_...). Issued on approval; managed in Dashboard → Settings → Developer.

X-Numero-Signature
string
header
required

Base64(HMAC-SHA256(publicApiKey, input)) over the raw request body (POST) or canonicalized query string (signed GET). Also send X-Numero-Signature-Version: v2. Required on money-movement / state-changing endpoints (marked 🔒).

The HMAC key is your Public Key as raw UTF-8 bytes — a SECRET despite the name, and a different value from the X-Numero-Api-Key authentication header. Signing with the API key will never produce a valid signature.

Body

application/json
externalId
string | null

Your own stable id for this customer (idempotency).

email
string | null
phone
string | null
firstName
string | null
lastName
string | null
country
string | null

ISO-3166 alpha-2 country code.

metadataJson
string | null

Free-form JSON string you control.

Response

The created customer

Canonical response envelope for the public surface. data on success, error on failure.

data
any
required

Endpoint payload on success (object or array); null on failure.

error
object | null
required
meta
object
required