List Users

Retrieve all users in your organization.

Request

GET https://api.entryguard.io/api/v1/users

Authentication

Requires a valid Bearer JWT token with ORG_ADMIN role.

Authorization: Bearer <access_token>

Query Parameters

This endpoint does not accept query parameters. All users in the authenticated user's organization are returned.

Response

Returns an array of user objects.

Response Schema

[
  {
    "id": "uuid",
    "email": "string",
    "name": "string",
    "isOrgAdmin": "boolean",
    "platformRole": "string",
    "isActive": "boolean",
    "mfaEnabled": "boolean",
    "lastLoginAt": "timestamp",
    "roleNames": ["string"],
    "createdAt": "timestamp",
    "updatedAt": "timestamp"
  }
]

Field	Type	Description
id	UUID	Unique identifier for the user
email	string	User's email address
name	string	User's full name
isOrgAdmin	boolean	Whether the user has organization admin privileges
platformRole	string	Platform-level role (e.g., SUPER_ADMIN, CUSTOMER, SUPPORT)
isActive	boolean	Whether the user account is active
mfaEnabled	boolean	Whether multi-factor authentication is enabled
lastLoginAt	timestamp	ISO 8601 timestamp of the user's last login (null if never logged in)
roleNames	string[]	Array of role names assigned to this user
createdAt	timestamp	ISO 8601 timestamp when the user was created
updatedAt	timestamp	ISO 8601 timestamp when the user was last updated

Success Response

Status Code: 200 OK

[
  {
    "id": "770e8400-e29b-41d4-a716-446655440003",
    "email": "[email protected]",
    "name": "Alice Admin",
    "isOrgAdmin": true,
    "platformRole": "CUSTOMER",
    "isActive": true,
    "mfaEnabled": true,
    "lastLoginAt": "2026-02-18T09:30:00Z",
    "roleNames": ["DevOps Team", "Security Team"],
    "createdAt": "2026-01-15T10:00:00Z",
    "updatedAt": "2026-02-18T09:30:00Z"
  },
  {
    "id": "770e8400-e29b-41d4-a716-446655440004",
    "email": "[email protected]",
    "name": "Bob Developer",
    "isOrgAdmin": false,
    "platformRole": "CUSTOMER",
    "isActive": true,
    "mfaEnabled": false,
    "lastLoginAt": "2026-02-17T14:20:00Z",
    "roleNames": ["Backend Developers"],
    "createdAt": "2026-01-20T11:30:00Z",
    "updatedAt": "2026-02-17T14:20:00Z"
  },
  {
    "id": "770e8400-e29b-41d4-a716-446655440005",
    "email": "[email protected]",
    "name": "Charlie Contractor",
    "isOrgAdmin": false,
    "platformRole": "CUSTOMER",
    "isActive": false,
    "mfaEnabled": false,
    "lastLoginAt": null,
    "roleNames": [],
    "createdAt": "2026-02-10T16:45:00Z",
    "updatedAt": "2026-02-15T08:00:00Z"
  }
]

Error Responses

Status Code	Description
401 Unauthorized	Missing or invalid authentication token
403 Forbidden	User does not have ORG_ADMIN role
429 Too Many Requests	Rate limit exceeded
500 Internal Server Error	Server error occurred

Error Response Schema:

{
  "timestamp": "2026-02-18T10:30:00Z",
  "status": 401,
  "error": "Unauthorized",
  "message": "Authentication required",
  "path": "/api/v1/users"
}

Example

Request

curl -X GET https://api.entryguard.io/api/v1/users \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

Response

[
  {
    "id": "770e8400-e29b-41d4-a716-446655440003",
    "email": "[email protected]",
    "name": "Alice Admin",
    "isOrgAdmin": true,
    "platformRole": "CUSTOMER",
    "isActive": true,
    "mfaEnabled": true,
    "lastLoginAt": "2026-02-18T09:30:00Z",
    "roleNames": ["DevOps Team", "Security Team"],
    "createdAt": "2026-01-15T10:00:00Z",
    "updatedAt": "2026-02-18T09:30:00Z"
  },
  {
    "id": "770e8400-e29b-41d4-a716-446655440004",
    "email": "[email protected]",
    "name": "Bob Developer",
    "isOrgAdmin": false,
    "platformRole": "CUSTOMER",
    "isActive": true,
    "mfaEnabled": false,
    "lastLoginAt": "2026-02-17T14:20:00Z",
    "roleNames": ["Backend Developers"],
    "createdAt": "2026-01-20T11:30:00Z",
    "updatedAt": "2026-02-17T14:20:00Z"
  }
]