person or company must be provided (never both); requests violating this are rejected with 400 only one of person or company should be present.Idempotency-Key. Sending the header is not an error and has no effect: the request executes every time, and a retry creates a second record. Deduplication is the caller's responsibility. Account-number beneficiaries are not de-duplicated at all, so creating the same one twice silently produces two records (a pay_id is unique platform-wide, which is the asymmetry that catches people).bank_code_type also accepts IBAN, SORT_CODE, ABA and SWIFT, and bank_country any ISO alpha-3 code. Outside AUS an address is required at creation. The identifier types a payout rail accepts are checked when the payout is created. Destination fields are immutable after creation; address, relationship, status and metadata can be changed with PATCH.