---
title: "List tenant test users"
method: GET
path: "/auth/v1/test-users"
tags: ["Auth"]
---

# List tenant test users

`GET /auth/v1/test-users`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/auth/v1/test-users`
- Auth: API key in header `apikey` and HTTP bearer

Service-key-only list of watermarked test users. Secret-bearing session values are never returned.

## Response `200`

Test users

- AuthTestUsersResponse
  - `users` AuthTestUser[], required
    - `id` string, uuid, required
    - `label` string, required
    - `email` string, email, required
    - `is_test` true, required
    - `is_admin` boolean, required
    - `created` boolean: Present on POST /auth/v1/test-sessions to distinguish create vs reuse.
    - `created_at` string, date-time, required
    - `email_verified_at` string, date-time, nullable
    - `last_minted_at` string, date-time, nullable
    - `active_sessions` integer

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)