Skip to main content
POST
Create (or get) a customer

Authorizations

X-Suby-Api-Key
string
header
required

Secret API key. sk_live_… (production) or sk_sandbox_… (sandbox).

Headers

Idempotency-Key
string

Optional key (≤255 chars, e.g. a UUID v4) making this POST safe to retry · the response is cached 24h and a retry with the SAME key replays it instead of re-executing. The same key with a different body → 422 IDEMPOTENCY_KEY_CONFLICT; a retry while the first is in flight → 409.

Maximum string length: 255
Example:

"5f3b9c2e-1a4d-4f2b-9c31-7e2a1b6d8c04"

Body

application/json
email
string<email>
required

Identity key · the same email always resolves to the same customer, per account and environment.

Maximum string length: 320
firstName
string

Forwarded to the PSP on card charges.

Maximum string length: 100
lastName
string
Maximum string length: 100
billingAddress
object

Drives the VAT country and pre-fills future charges.

isBusiness
boolean
default:false

Standing B2B status · what a charge taken with nobody on the page (an off-session debit, a renewal) is priced on. Drives the MoR VAT reverse-charge, 0% except France.

businessName
string | null

Company name · doubles as the card holder name on a B2B charge.

Maximum string length: 200
taxId
string | null

Buyer VAT / fiscal number.

Maximum string length: 60
externalRef
string

Your reference (CRM id) · stored, echoed, filterable via ?externalRef=. Not unique.

Maximum string length: 120
metadata
object

Key-value pairs. ≤50 keys, keys ≤40 chars, values are strings ≤500 chars (or null to clear). Nested structures must be JSON-stringified into a single string value.

Response

Existing customer returned

success
boolean
required
Example:

true

data
object
required

Endpoint-specific payload.

message
string