---
title: "Discover User Identities"
method: POST
path: "/database/{version}/{container}/{environment}/{database}/users/discover"
tags: ["Users"]
---

# Discover User Identities

`POST /database/{version}/{container}/{environment}/{database}/users/discover`

Discover all user identities based on email addresses or user record names

## Path parameters

- `version` string, required — Protocol version
- `container` string, required — Container ID (begins with "iCloud.")
- `environment` 'development' | 'production', required — Container environment
- `database` 'public' | 'private' | 'shared', required — Database scope

## Request body

- object
  - `users` object[]
    - `emailAddress` string
    - `userRecordName` string

## Response `200`

User identities discovered successfully

- DiscoverResponse
  - `users` object[]
    - `userRecordName` string
    - `firstName` string
    - `lastName` string
    - `emailAddress` string

## Other responses

- `400` — Bad request (400) - BAD_REQUEST, ATOMIC_ERROR
- `401` — Unauthorized (401) - AUTHENTICATION_FAILED

## Changes

- **2025-07-06** `a17a324ec78e` — 1 info
  - endpoint added
- **2025-07-05** `a6d50d6e9dde` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/brightdigit/apis/apple-cloudkit-web-services-api/changes/database/:version/:container/:environment/:database/users/discover/post.md)

---

[API](https://skmtc.dev/brightdigit/apis/apple-cloudkit-web-services-api.md) · [All operations](https://skmtc.dev/brightdigit/apis/apple-cloudkit-web-services-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/brightdigit/apple-cloudkit-web-services-api/revisions/a17a324ec78e/schema)