---
title: "List users"
method: GET
path: "/firewall/apps/{app_id}/users"
---

# List users

`GET /firewall/apps/{app_id}/users`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/firewall/apps/{app_id}/users`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `firewall:read`

List the users for a Zen app

## Path parameters

- `app_id` integer, required

## Query parameters

- `page` integer
- `per_page` integer

## Response `200`

The users have been successfully listed

- object
  - `users` object[]
    - `id` string: The identifier of the user
    - `user_name` string: The name of the user
    - `blocked` boolean: If this user is blocked
    - `last_ip_address` string: The last IP address of the user
    - `first_seen_at` integer: The first time the user was seen
    - `last_seen_at` integer: The last time the user was seen
    - `location` object: The location of the user
      - `country` string
      - `iso_code` string
    - `rate_limiting_disabled` boolean: If the rate limiting is disabled for this user

## Other responses

- `404`: App not found

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)