---
title: "List members whose mail the key can read"
method: GET
path: "/v1/members"
tags: ["Directory"]
---

# List members whose mail the key can read

`GET /v1/members`

## Request

- Base URL: `https://api.slashy.com`
- URL: `https://api.slashy.com/v1/members`
- Auth: HTTP bearer

Each member the key can read, with their inboxes, sorted by email. That is the key's creator plus the members the creator can read in Slashy, narrowed to the members the key is limited to.

**Scope:** `directory.read`. **Rate limit class:** `read` (600/minute per key).

## Response `200`

OK

- MemberList
  - `members` Member[], required: Sorted by email.
    - `user_id` string, uuid, required: Slashy user id.
    - `email` string, required: Login email (lowercase).
    - `inboxes` Inbox[], required
      - `id` string, uuid, required: Pass as `inbox_id` to other endpoints.
      - `email` string, required: The inbox's address.
      - `owner_email` string, required: Login email of the member who owns the inbox (lowercase).

## Other responses

- `401`: Missing, malformed, unknown, revoked or expired API key. `error` is one of: `invalid_api_key`, `api_key_revoked`, `api_key_expired`.
- `403`: The key is valid but may not make this call. `error` is one of: `browser_not_allowed`, `ip_not_allowed`, `not_enterprise`, `key_owner_inactive`, `insufficient_scope`.
- `429`: Too many requests. Wait `Retry-After` seconds, then retry. `error` is one of: `too_many_auth_failures`, `rate_limited`, `too_many_concurrent_requests`.

---

[API](https://skmtc.dev/slashy/apis/slashy-enterprise-api.md) - [All operations](https://skmtc.dev/slashy/apis/slashy-enterprise-api/llms.txt) - [OpenAPI document](https://skmtc.dev/slashy/apis/slashy-enterprise-api/revisions/49841c75ad9f?raw)