`GET /api/v1/users` — every local account (never a password hash).

GET

/api/v1/users

curl --request GET \
  --url https://example.com/api/v1/users \
  --header 'Authorization: Bearer <token>'

Authorizations

• bearer

Responses

200

Every local account, without its password hash

Media typeapplication/json

Array<object>

User-account metadata for the API — never includes the password hash.

object

auth_source

required

How the account authenticates: "local" (password), "oidc" (external identity provider), "ldap" (directory bind), or "service" (a machine account that cannot sign in).

string

created_at

required

Account creation time (RFC 3339 text; no chrono types cross the API edge).

string

enabled

required

Account status: a disabled account is retained for the audit trail but cannot authenticate (defaults to true for accounts created before this column existed).

boolean

id

required

string format: uuid

last_login_at

Most recent successful login (RFC 3339 text), or None if the account has never logged in.

string | null

role

required

string

scope

required

One of:

string

Unrestricted visibility.

string

Allowed values: All

object

Visibility limited to these group identifiers.

object

Groups

required

Visibility limited to these group identifiers.

Array<string>

unique items

username

required

string

Example

[
  {
    "scope": "All"
  }
]

401

No valid bearer token

Media typeapplication/json

The ADR-019 envelope every failure renders as. pub(crate) and schema-bearing so the OpenAPI document can name one error shape for every endpoint (ADR-035) instead of leaving 4xx/5xx bodies undescribed — a client that has to guess the failure shape ends up parsing the success shape and reading undefined.

object

error

required

object

code

required

Stable machine-readable code. Clients branch on this, never on the message.

string

message

required

Operator-facing sentence. Safe to display; never carries an internal error’s own text.

string

Example^generated

{
  "error": {
    "code": "example",
    "message": "example"
  }
}

403

Role below Admin

Media typeapplication/json

The ADR-019 envelope every failure renders as. pub(crate) and schema-bearing so the OpenAPI document can name one error shape for every endpoint (ADR-035) instead of leaving 4xx/5xx bodies undescribed — a client that has to guess the failure shape ends up parsing the success shape and reading undefined.

object

error

required

object

code

required

Stable machine-readable code. Clients branch on this, never on the message.

string

message

required

Operator-facing sentence. Safe to display; never carries an internal error’s own text.

string

Example^generated

{
  "error": {
    "code": "example",
    "message": "example"
  }
}

503

This core has no write side (skeleton mode)

Media typeapplication/json

The ADR-019 envelope every failure renders as. pub(crate) and schema-bearing so the OpenAPI document can name one error shape for every endpoint (ADR-035) instead of leaving 4xx/5xx bodies undescribed — a client that has to guess the failure shape ends up parsing the success shape and reading undefined.

object

error

required

object

code

required

Stable machine-readable code. Clients branch on this, never on the message.

string

message

required

Operator-facing sentence. Safe to display; never carries an internal error’s own text.

string

Example^generated

{
  "error": {
    "code": "example",
    "message": "example"
  }
}