---
title: "List partner access"
method: GET
path: "/api/v1/account/partner-access"
tags: ["account"]
---

# List partner access

`GET /api/v1/account/partner-access`

## Request

- Base URL: `https://point11.ai`
- URL: `https://point11.ai/api/v1/account/partner-access`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://auth.point11.ai/oauth2/authorize`, token URL `https://auth.point11.ai/oauth2/token`)

List the partner firms that can work in the organization, and the firms asking for access. Each partner names its Partner ID, when it was given access, and its people: their role at the firm, the access the firm gives them in its clients, and what they can do here now. Each request names who asked, when it lapses, and the people approving it would admit; an owner or admin answers it with account_partner_link_requests_approve or account_partner_link_requests_decline, and removes a partner with account_partner_access_revoke.

## Query parameters

- `limit` integer: Number of items to return (1–1000)
- `cursor` string: Opaque cursor returned as nextCursor by the previous page

## Headers

- `Point11-Organization` string, uuid

## Response `200`

Success.

- AccountPartnerAccessListResponse
  - `data` object[], required
    - `kind` 'partner' | 'request', required
    - `id` string, uuid, required: A partner's access id (for account_partner_access_revoke), or a request's id (for account_partner_link_requests_approve and account_partner_link_requests_decline)
    - `managerId` string, uuid, required
    - `name` string, required: The partner firm's name
    - `partnerId` string, required: The firm's 10-digit Partner ID, bare digits
    - `at` string, date-time, required: When the firm was given access, or when it asked
    - `expiresAt` string, date-time, nullable, required: When an unanswered request lapses; null for a partner
    - `requestedBy` object, nullable, required: Who at the firm asked; null for a partner
      - `name` string, nullable, required
      - `email` string, required
    - `people` object[], required: The firm's people: who has access through it, or would once approved
      - `userId` string, uuid, required
      - `name` string, nullable, required
      - `email` string, required
      - `managerRole` 'owner' | 'admin' | 'editor' | 'viewer', required: Their role at the partner firm
      - `clientRole` 'admin' | 'editor' | 'viewer' | 'none', required: The access the firm gives them in its clients; none reaches no client
      - `effectiveRole` 'owner' | 'admin' | 'editor' | 'viewer', nullable, required: What they can do in this organization now, through any membership or partner; null when they cannot reach it
  - `nextCursor` string, nullable, required

## Other responses

- `400`: The input, query, or Idempotency-Key is invalid.
- `401`: The bearer is missing, expired, or not accepted.
- `403`: The credential lacks the operation's scope or role, or the operation needs a different door.
- `404`: The resource or organization does not exist for this caller.
- `405`: This path takes another HTTP method, named in `Allow`.
- `409`: The request conflicts with current state or with prior use of its Idempotency-Key.
- `413`: The request, or the answer it asks for, is too large; narrow it.
- `429`: The credential's rate budget is spent; retry after `Retry-After` seconds.
- `500`: An unexpected server failure; retry later. Only `request_id` identifies it.
- `503`: A dependency is temporarily unavailable; retry after `Retry-After` seconds.
- `default`: Another status a product answers for its own refusal (for example `415` for an unsupported attachment); branch on `code`.

---

[API](https://skmtc.dev/point11/apis/point11-api.md) · [All operations](https://skmtc.dev/point11/apis/point11-api/llms.txt) · [OpenAPI document](https://skmtc.dev/point11/apis/point11-api/revisions/5241805fe425?raw)