> ## Documentation Index > Fetch the complete documentation index at: https://docs.crossmint.com/llms.txt > Use this file to discover all available pages before exploring further. # List Buyer Profiles > Lists the authenticated user's buyer profiles, newest first. Paginate with the opaque `cursor` taken from the previous page's `nextCursor`. **API scope required**: `agent-checkouts.buyer-profiles.read` ## OpenAPI ````yaml get /unstable/agent-checkouts/buyer-profiles openapi: 3.0.3 info: title: Crossmint Agent Checkouts API version: unstable description: >- Drive a real, automated browser session through any merchant's checkout on behalf of a signed-in user. You hand the API a product URL, an optional natural-language instruction, and a hard maximum cost. Crossmint runs a browser through the merchant's checkout pages, pausing for *user actions* (shipping, payment, anything only a human can answer) which you respond to with values that satisfy a supplied JSON Schema. There are no webhooks in v1 — poll the checkout until it reaches a terminal state. ## Base URL `https://www.crossmint.com/api` (production) · `https://staging.crossmint.com/api` (staging) ## Authentication Every request requires **two** credentials: - `X-API-KEY` — a client-side API key (`ck_...`) with the `agent-checkouts.*` scopes. - `Authorization: Bearer ` — a JWT identifying the end user, issued by an external auth provider your project trusts. Without it the API returns `401`. This API lives under the `unstable` namespace. The schema may change — pin and re-test on upgrades. servers: - url: https://www.crossmint.com/api description: Production - url: https://staging.crossmint.com/api description: Staging security: - ApiKeyAuth: [] BearerAuth: [] tags: - name: Agent Checkouts description: Create, poll, respond to, and cancel browser-driven checkouts. - name: Buyer Profiles description: >- Subject-scoped buyer identity and shipping address the agent can prefill during a checkout run. Payment data is never stored. paths: /unstable/agent-checkouts/buyer-profiles: get: tags: - Buyer Profiles summary: List Buyer Profiles description: >- Lists the authenticated user's buyer profiles, newest first. Paginate with the opaque `cursor` taken from the previous page's `nextCursor`. **API scope required**: `agent-checkouts.buyer-profiles.read` operationId: listBuyerProfiles parameters: - name: cursor in: query required: false description: Opaque pagination cursor from a previous response's `nextCursor`. schema: type: string - name: limit in: query required: false description: Maximum number of profiles to return per page. schema: type: integer minimum: 1 maximum: 100 responses: '200': description: Returns one page of the user's buyer profiles. content: application/json: schema: $ref: '#/components/schemas/BuyerProfileListResponse' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' components: schemas: BuyerProfileListResponse: type: object description: One page of buyer profiles, newest first. required: - data - nextCursor properties: data: type: array items: $ref: '#/components/schemas/BuyerProfile' description: The buyer profiles in this page. nextCursor: type: string nullable: true description: Opaque cursor for the next page, or null on the last page. BuyerProfile: type: object description: The full buyer profile, returned by create, get, list items, and update. required: - id - shipping - createdAt - updatedAt properties: id: type: string format: uuid description: >- The buyer profile id. Pass it as `buyerProfileId` when creating a checkout. label: type: string minLength: 1 maxLength: 120 description: Optional human-readable label for the profile. name: $ref: '#/components/schemas/BuyerProfileName' contact: $ref: '#/components/schemas/BuyerProfileContact' shipping: $ref: '#/components/schemas/BuyerProfileShipping' createdAt: type: string format: date-time updatedAt: type: string format: date-time Error: type: object properties: statusCode: type: integer error: type: string message: type: string BuyerProfileName: type: object description: Optional buyer name. Both parts are optional. properties: first: type: string minLength: 1 maxLength: 100 description: Given name. last: type: string minLength: 1 maxLength: 100 description: Family name. BuyerProfileContact: type: object description: Optional buyer contact details. properties: email: type: string format: email maxLength: 254 description: Contact email address. phone: type: string minLength: 1 maxLength: 40 description: Contact phone number. BuyerProfileShipping: type: object description: >- Global shipping address. `administrativeAreaCode` and `postalCode` are nullable for global-address compatibility. required: - addressLines - locality - countryCode properties: addressLines: type: array minItems: 1 items: type: string minLength: 1 maxLength: 200 description: Positional street address lines (at least one). locality: type: string minLength: 1 maxLength: 120 description: City or locality. administrativeAreaCode: type: string minLength: 1 nullable: true description: ISO 3166-2 subdivision (state/province) code, or null. postalCode: type: string minLength: 1 nullable: true description: Postal or ZIP code, or null when the address has none. countryCode: type: string minLength: 2 maxLength: 2 pattern: ^[A-Za-z]{2}$ description: ISO 3166-1 alpha-2 country code (2 letters). responses: BadRequest: description: The request body or parameters were invalid. content: application/json: schema: $ref: '#/components/schemas/Error' Unauthorized: description: >- Missing or invalid authentication. A valid `X-API-KEY` and `Authorization: Bearer ` are both required. content: application/json: schema: $ref: '#/components/schemas/Error' Forbidden: description: >- The API key lacks the required scope, or Agent Checkouts is not enabled for this project. content: application/json: schema: $ref: '#/components/schemas/Error' securitySchemes: ApiKeyAuth: type: apiKey in: header name: X-API-KEY description: Client-side API key (`ck_...`) with the `agent-checkouts.*` scopes. BearerAuth: type: http scheme: bearer bearerFormat: JWT description: >- JWT identifying the end user, issued by an external auth provider your project trusts. ````