Sign up for an account
Creates a new Comecero account with its first user, who becomes the account owner. This is how someone signs up, so it needs no token. The response has a live trusted token for the owner, so they are signed in at once.
The new account is not live: it can take test payments right away, and Comecero sets live once the account is approved. Default settings, a test gateway and a shipping method for the account's country are created with it.
application/json- body
A new account and its first user, who becomes the account owner. The account's country is guessed from your IP address when you leave it out.
name*stringThe owner's full name, at least 4 characters.
4 <= length <= 75email*stringThe owner's email address. It is also the first user's email.
emaillength <= 75user_id*stringThe first user's sign-in name: at least 5 characters of letters, numbers, underscores, dashes and periods.
5 <= lengthpassword*stringThe first user's password, at least 8 characters.
password8 <= lengthcompany_name?stringThe legal name of the company. It is also used as dba.
length <= 75website?stringThe company website.
length <= 75support_email?stringThe email address shoppers see for help.
emaillength <= 75support_website?stringThe support page shoppers see. Defaults to website.
length <= 75phone?stringA phone number.
length <= 25tax_number?stringThe VAT or tax registration number.
length <= 50registration_number?stringThe company registration number.
length <= 50logo_url?stringA public https URL of the logo.
urilength <= 500address_1?stringThe first line of the address.
length <= 75address_2?stringThe second line of the address.
length <= 75city?stringThe city.
length <= 75state_prov?stringThe state or province.
length <= 75postal_code?stringThe postal code.
length <= 75country?stringThe country, as an ISO 3166-1 alpha-2 code.
signup_terms_version?stringThe version of the Comecero terms of service and privacy policy the person accepted, up to 50 characters. Saved with the time.
length <= 50The new account, with a trusted token for its owner.
application/json- response
Your Comecero account: your company details, the contact details shoppers see, and whether the account may take live payments. One account holds both your test and your live data.
object?"account"The object type. Always account.
"account"url?stringThe URL of this account.
uriaccount_id?stringThe account ID, two letters and four digits.
alias?|A short name for the account that users may sign in with instead of the account ID. It is also the start of your sign-in page address.
date_created?stringWhen the account was created.
date-timedate_modified?stringWhen the account was last changed.
date-timecompany_name?|The legal name of your company.
length <= 75dba?|The name you trade under, if it differs from company_name.
length <= 75name?|The full name of the main contact.
length <= 75email?|The main contact's email address.
emaillength <= 75website?|Your website. https:// is added when you leave out the protocol.
length <= 75phone?|Your phone number.
length <= 25tax_number?|Your VAT or tax registration number, printed on invoices. In the EU an invoice needs it.
length <= 50registration_number?|Your company registration number.
length <= 50logo_url?|A public https URL of your logo, used on invoices and emails. Up to 500 characters.
urilength <= 500address_1?|The first line of your address.
length <= 75address_2?|The second line of your address.
length <= 75city?|Your city.
length <= 75state_prov?|Your state or province. For the US and Canada, the standard two-letter code.
length <= 75postal_code?|Your postal code.
length <= 75country?|Your country, as an ISO 3166-1 alpha-2 code.
support_email?|The email address shoppers see for help. Null when you want none shown on your shop.
emaillength <= 75support_website?|The support page shoppers see. When it is empty, website is used.
length <= 75live?booleanTrue when the account may take live payments. New accounts start with false and Comecero sets it once the account is approved.
closed?booleanTrue when the account has been closed.
date_closed?|When the account was closed. Null for an open account.
date-timeaccount_meta?|The account's meta details, as a URL, or the object when you send expand=account_meta.
token?stringA live trusted token for the account owner, so they are signed in at once. Only in the response to POST /accounts.
formatted?Display text for dates and the country. Only present when you send formatted=true.
curl -X POST 'https://api.comecero.com/api/v1/accounts' \ -H 'Content-Type: application/json' \ -d '{ "name": "John Doe", "email": "john@example.com", "user_id": "john.doe", "password": "correct-horse-battery"}'{ "object": "account", "url": "https://api.comecero.com/api/v1/accounts/AB1234", "account_id": "AB1234", "alias": "example-software-ltd", "date_created": "2026-11-07T14:36:52Z", "date_modified": "2026-11-07T14:36:52Z", "company_name": "Example Software Ltd", "dba": "Example Software Ltd", "name": "John Doe", "email": "john@example.com", "website": "https://www.example.com", "phone": null, "tax_number": null, "registration_number": null, "logo_url": null, "address_1": null, "address_2": null, "city": null, "state_prov": null, "postal_code": null, "country": "US", "support_email": null, "support_website": "https://www.example.com", "live": false, "closed": false, "date_closed": null, "token": "trusted.live.Ty5Qm8Rk2Lp9Wv3Xz7Bn4Cd1Fg6Hj0Sa8Ue2Io5Kl3Mq.1793887012.8c2f5a7b1d", "account_meta": "https://api.comecero.com/api/v1/accounts/AB1234/account_meta"}List accounts GET
Lists every Comecero account. This is for Comecero platform staff only: any other token, including your secret token, gets `403`. To read your own account, call `GET /accounts/me`. The list is cursor-based. Page with `after_item` and `before_item`.
Get your account GET
Gets your account. Use `me` so you do not need to know the account ID. You can only read the account your token belongs to (`403` for any other). The account is not split by mode, so this needs a live token. A test token gets `400` with the code `token_type_mismatch`. Live secret and trusted tokens may call this with the `accounts` read permission.