> ## Documentation Index
> Fetch the complete documentation index at: https://docs.finosu.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Customer Payment Methods

> List non-deleted payment-method identities for a live customer in the authenticated company. Includes inactive methods. Returns masked display fields only; status does not establish ACH authorization. Results are ordered by payment-method UUID, with SQL pagination.

Retrieve Finosu payment-method UUIDs for a customer using your company API key
in `X-API-Key`. `customerId` is your external customer reference, not the Finosu
customer UUID. Only non-deleted methods belonging to that live customer in the
authenticated company are returned.

## Response

```json theme={null}
[
  {
    "paymentMethodId": "17f82780-3c2d-4e71-bbad-03ca7f713e4f",
    "paymentMethodType": "BANK_ACCOUNT",
    "lastFour": "6789",
    "accountType": "checking",
    "status": "ACTIVE",
    "isDefault": true
  }
]
```

The response includes bank accounts and other payment-method types, including
inactive methods. `accountType` may be `null`. Vault tokens, full account and
routing numbers, billing details, and gateway metadata are never returned.
Method status and default status do not establish current ACH authorization or
permission to charge.

For [Update ACH Authorization Revocation](https://docs.finosu.com/api-reference/endpoint/customers/update-ach-authorization.md),
choose the intended `BANK_ACCOUNT` entry and use its `paymentMethodId` with the
same `customerId`. Last-four digits are not unique: if multiple methods could
match the intended account and the intent is to revoke all bank authorizations
for this customer, paginate all results and `POST` the revocation separately for
each `BANK_ACCOUNT` ID only. Never revoke cards or another customer's methods.
Check each response; the operation is not atomic across IDs. Otherwise confirm
the mapping rather than guessing. Do not select the first or default method
merely because it is listed.

## Pagination

`limit` defaults to 100 and accepts 1–100. `offset` defaults to 0 and must be
nonnegative. Results are ordered by payment-method UUID. Increase `offset` by
`limit` until a page contains fewer than `limit` entries. An existing customer
with no methods, or an offset beyond the last method, returns `200` with `[]`.
Separate pages reflect current records, not a fixed snapshot.

## Errors

* `401` — missing, invalid, or inactive API key
* `404` — unknown, deleted, or other-company customer
* `422` — invalid pagination parameters


## OpenAPI

````yaml GET /customers/{customerId}/payment-methods
openapi: 3.1.0
info:
  title: Finosu API
  description: Finosu API
  license:
    name: MIT
  version: 1.0.0
servers:
  - url: https://api.finosu.com
security:
  - apiKeyAuth: []
paths:
  /customers/{customerId}/payment-methods:
    get:
      summary: List Customer Payment Methods
      description: >-
        List non-deleted payment-method identities for a live customer in the
        authenticated company. Includes inactive methods. Returns masked display
        fields only; status does not establish ACH authorization. Results are
        ordered by payment-method UUID, with SQL pagination.
      parameters:
        - name: customerId
          in: path
          description: External customer reference ID
          required: true
          schema:
            type: string
        - name: limit
          in: query
          schema:
            type: integer
            minimum: 1
            maximum: 100
            default: 100
        - name: offset
          in: query
          schema:
            type: integer
            minimum: 0
            default: 0
      responses:
        '200':
          description: Payment methods; an empty array means no methods on this page.
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/PublicPaymentMethodResponse'
        '401':
          description: Missing, invalid, or inactive API key
        '404':
          description: Customer not found for the authenticated company
        '422':
          description: Invalid pagination parameters
      security:
        - apiKeyAuth: []
components:
  schemas:
    PublicPaymentMethodResponse:
      type: object
      required:
        - paymentMethodId
        - paymentMethodType
        - lastFour
        - accountType
        - status
        - isDefault
      properties:
        paymentMethodId:
          type: string
          format: uuid
          description: Finosu payment-method UUID; use for ACH revocation of bank accounts.
        paymentMethodType:
          type: string
          enum:
            - CREDIT_CARD
            - DEBIT_CARD
            - BANK_ACCOUNT
            - CARD
            - DIGITAL_WALLET
        lastFour:
          type: string
          description: Masked account/card suffix; not a unique account identifier.
        accountType:
          type:
            - string
            - 'null'
        status:
          type: string
          enum:
            - ACTIVE
            - INACTIVE
            - EXPIRED
            - FAILED
            - PENDING_VERIFICATION
        isDefault:
          type: boolean
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: X-API-Key

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.