TENANT API · V1
Create a customer Personal/corporate type, identity/contact facts, external reference.
POST /api/v1/tenant/customers
Authorization Use a server-side API key with the listed grants and permitted resource access.
Request body
typestring · required The type values for this request.Allowed: personal, corporate
displayNamestring · required Customer display name.
emailstring · optional Contact email address.
externalReferencestring · optional Your stable reference, unique to this integration and resource type. Response 201 Created
Returns the authorized resource or result for this operation. List results use items, nextCursor, and hasMore.
Errors Authentication failures return 401 or 403. Inaccessible resources return 404. Business and idempotency conflicts return 409. Rate limits return 429 with retry guidance.
Error handling guide REQUEST API key
curl --request POST 'https://api.wincora.com/api/v1/tenant/customers' \ --header 'X-Api-Key: YOUR_API_KEY' \ --header 'Idempotency-Key: request-example-001' \ --header 'Content-Type: application/json' \ --data '{ "type": "corporate", "displayName": "Acme Travel", "externalReference": "customer-1042" }' const response = await fetch ( 'https://api.wincora.com/api/v1/tenant/customers' , { method: 'POST' , headers: { "X-Api-Key" : process.env. WINCORA_API_KEY , "Idempotency-Key" : "request-example-001" , "Content-Type" : "application/json" }, body: JSON . stringify ({ "type" : "corporate" , "displayName" : "Acme Travel" , "externalReference" : "customer-1042" }) }); if ( ! response.ok) throw new Error ( await response. text ()); const result = await response. json (); import os import requests response = requests.request( 'POST' , 'https://api.wincora.com/api/v1/tenant/customers' , headers = { "X-Api-Key" : os.environ[ "WINCORA_API_KEY" ], "Idempotency-Key" : "request-example-001" , "Content-Type" : "application/json" }, json = { "type" : "corporate" , "displayName" : "Acme Travel" , "externalReference" : "customer-1042" }, timeout = 30 , ) response.raise_for_status() result = response.json() Keep this API key on your server. Never embed it in browser or mobile code.
