List a customer's payment methods
Lists the payment methods saved to a customer, oldest first. Every method comes back on one page: limit, offset and sort_by are not used here.
Card and bank numbers are never returned, only masks, the last four digits and the brand.
Secret tokens, and limited tokens tied to the customer.
AuthorizationBearer <token>A secret, trusted or limited token. See Authentication.
customer_id*stringThe id of the customer. With a limited token from a customer login you can send me instead.
expand?stringComma-separated child objects to return in full instead of as a URL, for example customer,payments. Use dot notation for nested objects (items.product), up to four levels deep. A single object takes up to 12 paths; a list takes up to 2, applied to every item. Extra paths are dropped without an error. See Expanding objects.
show?stringComma-separated fields to return; all others are left out. Use dot notation for child fields (customer.email). You cannot send show and hide together (400). See Customizing output.
hide?stringComma-separated fields to leave out of the response. Use dot notation for child fields (customer.email). You cannot send show and hide together (400). See Customizing output.
formatted?booleanWhen true, the object also has a formatted child with amounts and dates as display text in the shopper's language and currency (for example $19.99 or November 7, 2026). The default is false. See Localized formatting.
falseThe customer's payment methods.
application/json- response
An offset-based list of a customer's payment methods. Every payment method comes back on one page, oldest first.
total_items*integerThe number of payment methods.
total_pages*integerThe number of pages.
current_page*integerThe page number of this page.
next_page_url*|The URL of the next page, or null.
next_page_offset*|The offset of the next page, or null.
previous_page_url*|The URL of the previous page, or null.
previous_page_offset*|The offset of the previous page, or null.
current_page_url*stringThe URL of this page.
data*array<>The payment methods.
curl -X GET 'https://api.comecero.com/api/v1/customers/string/payment_methods'{ "total_items": 1, "total_pages": 1, "current_page": 1, "next_page_url": null, "next_page_offset": null, "previous_page_url": null, "previous_page_offset": null, "current_page_url": "https://api.comecero.com/api/v1/customers/0091304300408CuoxY9Pf3/payment_methods", "data": [ { "url": "https://api.comecero.com/api/v1/customers/0091304300408CuoxY9Pf3/payment_methods/0092503470929PmEP0ivO4", "object": "payment_method", "payment_method_id": "0092503470929PmEP0ivO4", "date_created": "2026-11-02T18:20:31Z", "date_modified": "2026-11-02T18:20:31Z", "test": true, "type": "credit_card", "data": { "object": "credit_card", "mask": "4***********1111", "fingerprint": "2321657x8123834dc21ea08f", "exp_month": 12, "exp_year": 28, "cardholder_name": "John Doe", "ending": "1111", "type": "Visa", "label": "Visa 1111", "billing_address": { "object": "address", "name": "John Doe", "address_1": "123 Main St.", "address_2": null, "city": "New York", "state_prov": "NY", "postal_code": "10019", "country": "US", "email": null, "meta": null } }, "is_default": true, "date_last_used": "2026-11-02T18:20:31Z" } ]}List a customer's orders GET
Lists a customer's orders, oldest first. The list is offset-based: follow `next_page_url` or send `offset`. Secret tokens, and limited tokens tied to the customer. This is how a signed-in customer sees their order history.
Add a payment method POST
Saves a card or US bank account to a customer. Comecero first checks it with a $0 payment at the gateway (in a currency guessed from the customer's location); if the check fails, nothing is saved and the call fails. The card number is vaulted and the security code is dropped. The customer's first payment method becomes the default. Send `is_default: true` to make a later one the default. If the account does not allow saved cards, this only works for a customer who already has a payment method on file (`409` otherwise). The same card or account twice is a `409`. Secret tokens, and limited tokens tied to the customer. Only a secret token can skip the check with `validate: false`.