List endpoints return one page at a time. When there are more items, the response includes next_cursor. Pass it back to get the next page; when it’s missing, you’ve reached the end.
Treat cursors as opaque: don’t build or change them. An invalid cursor gets 400 Bad Request.