Lists return { object: "list", data, has_more, next_cursor }. Pass next_cursor back as starting_after until has_more is false. Cursors are opaque base64url values ordered by (created_at, id); invalid cursors return 400. limit is 1–100 (default 25).