---
title: "List users"
method: GET
path: "/api/users"
tags: ["Users"]
---

# List users

`GET /api/users`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/users`
- Auth: HTTP bearer

Retrieve all users within the current organization.

## Response `200`

Successful response

- object: Response containing users and count information
  - `users` object[], required: Array of user records
    - `id` string, required: Unique identifier of the user
    - `email` string, required: Email address of the user
    - `displayName` string: Profile display name, falling back to email
    - `imageUrl` string, nullable: OAuth profile image URL when available
    - `roleId` string: Role assigned to the user
    - `createdAt` string, date-time, required: When the user account was created
    - `updatedAt` string, date-time, required: When the user account was last updated
    - `lastLogin` string, date-time, nullable, required: When the user last logged in (null if never)
    - `organization` string, required: Organization where the listed access applies
    - `isCrossOrgGrant` boolean: Whether access comes from a cross-organization permission grant
  - `count` number, required: Total number of users returned

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Forbidden — the authenticated user lacks the required permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)