---
title: "Every user of this brand, paginated"
method: GET
path: "/operator/users"
tags: ["Operator"]
---

# Every user of this brand, paginated

`GET /operator/users`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/operator/users`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Query parameters

- `limit` integer
- `offset` integer, nullable
- `search` string

## Response `200`

Users

- object
  - `items` object[], required
    - `id` string, uuid, required
    - `email` string, required
    - `verified` boolean, required
    - `disabled` boolean, required
    - `createdAt` string, required: ISO-8601 timestamp
    - `lastSignInAt` string, nullable, required: ISO-8601 timestamp
    - `organizations` object[], required
      - `id` string, uuid, required
      - `name` string, required
      - `role` string, required
  - `total` integer, required
  - `limit` integer, required
  - `offset` integer, required

## Other responses

- `400`: Invalid request (code invalid_request)
- `403`: An action on an operator-console session older than 5 minutes (code forbidden, details.reauthenticate: sign in again at /admin/login), or an operator removed since the session was resolved
- `404`: Not found (code not_found); also the answer to any request without a live operator-console session (no admin cookie, a dashboard session, an API/MCP key or OAuth token, or a caller who is not a platform operator)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Not available on this server (code not_configured)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)