Pre-1.0 · one maintainer · Stripe and cards only · no SDKs (client libraries) yet · no production users yet. Docs describe v0.9.1 (29 Oct 2026) · What’s new →

Export customers as CSV

GET

/v1/exports/customers.csv

const url = 'http://localhost:8080/v1/exports/customers.csv';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url http://localhost:8080/v1/exports/customers.csv \
  --header 'Authorization: Bearer <token>'

Streams every customer, newest first, from one consistent snapshot. Columns: id, external_id, display_name, email, status, email_status, created_at, updated_at.

Each export writes an export row to the audit log before any data is sent. If that row cannot be written, the call returns 500 and sends nothing. If the export fails after it started, the last row’s first cell is EXPORT_INCOMPLETE: discard the file and retry. Text cells that start with = + - @ get a leading ' so spreadsheets do not run them as formulas.

Authorizations

BearerAuth

Parameters

Query Parameters

from

string

Lower bound on created_at, inclusive. RFC 3339 or YYYY-MM-DD.

string

Upper bound on created_at, inclusive. RFC 3339 or YYYY-MM-DD (end of that day, UTC).

Responses

200

CSV file (sent as an attachment).

text/csv

string

422

from or to is malformed, or to is before from.

application/json

object

error

object

type

One of invalid_request_error, authentication_error, rate_limit_error or api_error. Every error the API answers has this shape, including an unknown path (404, code route_not_found) and a method the path does not take (405, code method_not_allowed, with an Allow header). The few exceptions are listed in docs/api-surface.md.

string

code

string

message

string

request_id

string

param

The request field the error is about. Sent only when the error names one. A request body may hold only the fields its operation lists, spelled and cased as listed: any other field, or one the server sets (such as id), is refused with 422 and param naming it. An operation with no request body lists no fields: send no body, {} or null. The Stripe and Postmark webhooks and the LiteLLM callback take their sender’s body as it comes.

string

Example

{
  "error": {
    "type": "invalid_request_error"
  }
}

500

The export’s audit row could not be written; nothing was sent.

application/json

object

error

object

type

string

code

string

message

string

request_id

string

param

string

Example

{
  "error": {
    "type": "invalid_request_error"
  }
}