---
title: "List mandates for a customer"
method: GET
path: "/v1/customers/{customerId}/mandates"
tags: ["Mandates"]
---

# List mandates for a customer

`GET /v1/customers/{customerId}/mandates`

## Request

- Base URL: `https://sandbox.api.infinite.dev`
- URL: `https://sandbox.api.infinite.dev/v1/customers/{customerId}/mandates`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/infinite/apis/infinite-api/docs/v1/customers/:customerId/mandates/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns spend-policy mandates scoped to the Connect customer. Lane A mocks against this list + evaluate.

## Path parameters

- `customerId` string, required

## Query parameters

- `limit` number
- `offset` number
- `status` 'ACTIVE' | 'REVOKED'

## Headers

- `X-API-Key` string

## Response `200`

- object
  - `data` MandateResponseDto[]
    - `id` string, required
    - `organizationId` string, required
    - `customerId` string, required
    - `name` string, required
    - `description` string, nullable, required
    - `status` 'ACTIVE' | 'REVOKED', required
    - `limits` MandateLimitsResponseDto, required
      - `currency` string, required
      - `perTransaction` string, required
      - `perDay` string, nullable, required
      - `perMonth` string, nullable, required
    - `allowedPayeeAccountIds` string[], nullable, required
    - `allowedRails` string[], nullable, required
    - `allowedDrafterPrincipalIds` string[], nullable, required
    - `validFrom` string, required
    - `validUntil` string, nullable, required
    - `metadata` object, required
    - `createdBy` string, nullable, required
    - `createdAt` string, required
    - `updatedAt` string, required
  - `total` number
  - `limit` number
  - `offset` number

## Other responses

- `401`: Unauthorized - Invalid or missing authentication credentials

## Changes

- **2026-10-03** `9f50af0b2ebf`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/infinite/apis/infinite-api/changes/v1/customers/:customerId/mandates/get.md)

---

[API](https://skmtc.dev/infinite/apis/infinite-api.md) - [All operations](https://skmtc.dev/infinite/apis/infinite-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infinite/apis/infinite-api/revisions/90065d3e6974?raw)