---
title: "List the users of an app"
method: GET
path: "/apps/{id}/users"
tags: ["Apps"]
---

# List the users of an app

`GET /apps/{id}/users`

## Request

- Base URL: `https://api.hypamoon.com/api/v1`
- URL: `https://api.hypamoon.com/api/v1/apps/{id}/users`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://app.hypamoon.com/oauth/authorize`, token URL `https://api.hypamoon.com/oauth/token`, scopes: `sites:read`)

The people who may sign in to the app, with their role and when they last signed in. Hypamoon keeps only their email address and name.

## Path parameters

- `id` string, uuid, required

## Response `200`

The users.

- object
  - `data` object[], required
    - `id` string, uuid, required: The person's id: sub in x-hypamoon-user.
    - `email` string, required
    - `name` string, nullable, required
    - `role` string, required
    - `created_at` string, required
    - `last_sign_in_at` string, nullable, required

## Other responses

- `401`: Unauthorized: unauthorized, missing_api_key, invalid_api_key, api_key_revoked, project_deleted.
- `403`: Forbidden: project_not_enabled, key_mode_mismatch, missing_scope, verification_required.
- `404`: Not Found: not_found.
- `409`: Conflict: conflict.
- `429`: Too Many Requests: rate_limited.
- `500`: Internal Server Error: internal_error.
- `503`: Service Unavailable: service_unavailable.

---

[API](https://skmtc.dev/hypamoon/apis/hypamoon-api.md) · [All operations](https://skmtc.dev/hypamoon/apis/hypamoon-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hypamoon/apis/hypamoon-api/revisions/9f0b90004c06?raw)