Step 1 of a CSV import: a presigned URL valid for 15 minutes. PUT your file to uploadUrl with Content-Type: text/csv, then start the import with the returned fileKey.

The first row is the header. phone (E.164, or national with a countrycode column — India is assumed only when neither says otherwise), email, name are read as such; every other column becomes a member attribute.

Security:

• The organisationId in the URL must match the organisation your JWT was issued for — requests for a different organisation fail with 401.
• Requires CRM_ADMIN, ACCOUNT_OWNER, or CRM_BOT role; other roles receive 403.