---
title: "GET /api/v1/agent-vault/members"
method: GET
path: "/api/v1/agent-vault/members"
tags: ["Agent Vault Members"]
---

# GET /api/v1/agent-vault/members

`GET /api/v1/agent-vault/members`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/agent-vault/members`
- Auth: none declared

List the users, groups and machine identities that are members of Agent Vault

## Query parameters

- `actorType` 'user' | 'machineIdentity' | 'group'
- `search` string
- `limit` integer
- `offset` integer

## Response `200`

Default Response

- object
  - `members` union[], required
    - union
      - object
        - `type` 'user', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `username` string, required: The username of the user.
        - `email` string, nullable, required: The email address of the user.
        - `firstName` string, nullable, required: The first name of the user.
        - `lastName` string, nullable, required: The last name of the user.
        - `isOrgMembershipPending` boolean, required: Whether the user still has an unaccepted invitation to the organization.
        - `role` string, required: The Agent Vault role: admin or member.
        - `isActive` boolean, required: Whether the member can currently reach Agent Vault.
        - `addedAt` string, date-time, required: When the member was added to Agent Vault.
      - object
        - `type` 'machineIdentity', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `name` string, required: The name of the machine identity.
        - `isManagedByAgentVault` boolean, required: Whether Agent Vault created the machine identity. One it owns is deleted rather than removed.
        - `orgId` string, uuid, nullable, required: The ID of the organization the machine identity belongs to.
        - `role` string, required: The Agent Vault role: admin or member.
        - `isActive` boolean, required: Whether the member can currently reach Agent Vault.
        - `addedAt` string, date-time, required: When the member was added to Agent Vault.
      - object
        - `type` 'group', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `name` string, required: The name of the group.
        - `role` string, required: The Agent Vault role: admin or member.
        - `isActive` boolean, required: Whether the member can currently reach Agent Vault.
        - `addedAt` string, date-time, required: When the member was added to Agent Vault.
  - `totalCount` number, required

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-10-12** `69b4d03fd736`: 6 breaking, 1 info
  - the `members/items/` response's property type changed from `object` to no type for status `200`
  - removed the required property `members/items/actor` from the response with the `200` status
  - removed the required property `members/items/createdAt` from the response with the `200` status
  - removed the required property `members/items/id` from the response with the `200` status
  - …3 more
- **2026-09-22** `62b0ba9edfe9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/agent-vault/members/get.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)