Your contacts, newest first, up to 100 per page (hasMore says whether another page exists). Filter by text, exact phone or email, a channel, or created/updated dates — updatedAfter makes an incremental sync cursor. Deleted contacts are never returned.

Security:

• The organisationId in the URL must match the organisation your JWT was issued for — requests for a different organisation fail with 401.
• Requires CRM_ADMIN, ACCOUNT_OWNER, or CRM_BOT role; other roles receive 403.