---
title: "Get user"
method: POST
path: "/public/v1/query/get_user"
tags: ["Users"]
---

# Get user

`POST /public/v1/query/get_user`

Get details about a user.

## Request body

- V1GetUserRequest
  - `organizationId` string, required — Unique identifier for a given organization.
  - `userId` string, required — Unique identifier for a given user.

## Response `200`

A successful response.

- V1GetUserResponse
  - `user` V1User, required
    - `userId` string, required — Unique identifier for a given User.
    - `userName` string, required — Human-readable name for a User.
    - `userEmail` string — The user's email address.
    - `userPhoneNumber` string — The user's phone number in E.164 format e.g. +13214567890
    - `authenticators` V1Authenticator[], required — A list of Authenticator parameters.
      - `transports` V1AuthenticatorTransport[], required — Types of transports that may be used by an Authenticator (e.g., USB, NFC, BLE).
      - `attestationType` string, required
      - `aaguid` string, required — Identifier indicating the type of the Security Key.
      - `credentialId` string, required — Unique identifier for a WebAuthn credential.
      - `model` string, required — The type of Authenticator device.
      - `credential` Externaldatav1Credential, required
        - `publicKey` string, required — The public component of a cryptographic key pair used to sign messages and transactions.
        - `type` 'CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR' | 'CREDENTIAL_TYPE_API_KEY_P256' | 'CREDENTIAL_TYPE_RECOVER_USER_KEY_P256' | 'CREDENTIAL_TYPE_API_KEY_SECP256K1' | 'CREDENTIAL_TYPE_EMAIL_AUTH_KEY_P256' | 'CREDENTIAL_TYPE_API_KEY_ED25519' | 'CREDENTIAL_TYPE_OTP_AUTH_KEY_P256' | 'CREDENTIAL_TYPE_READ_WRITE_SESSION_KEY_P256' | 'CREDENTIAL_TYPE_OAUTH_KEY_P256' | 'CREDENTIAL_TYPE_LOGIN', required
      - `authenticatorId` string, required — Unique identifier for a given Authenticator.
      - `authenticatorName` string, required — Human-readable name for an Authenticator.
      - `createdAt` Externaldatav1Timestamp, required
        - `seconds` string, required
        - `nanos` string, required
      - `updatedAt` Externaldatav1Timestamp, required
        - `seconds` string, required
        - `nanos` string, required
    - `apiKeys` V1ApiKey[], required — A list of API Key parameters. This field, if not needed, should be an empty array in your request body.
      - `credential` Externaldatav1Credential, required
        - `publicKey` string, required — The public component of a cryptographic key pair used to sign messages and transactions.
        - `type` 'CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR' | 'CREDENTIAL_TYPE_API_KEY_P256' | 'CREDENTIAL_TYPE_RECOVER_USER_KEY_P256' | 'CREDENTIAL_TYPE_API_KEY_SECP256K1' | 'CREDENTIAL_TYPE_EMAIL_AUTH_KEY_P256' | 'CREDENTIAL_TYPE_API_KEY_ED25519' | 'CREDENTIAL_TYPE_OTP_AUTH_KEY_P256' | 'CREDENTIAL_TYPE_READ_WRITE_SESSION_KEY_P256' | 'CREDENTIAL_TYPE_OAUTH_KEY_P256' | 'CREDENTIAL_TYPE_LOGIN', required
      - `apiKeyId` string, required — Unique identifier for a given API Key.
      - `apiKeyName` string, required — Human-readable name for an API Key.
      - `createdAt` Externaldatav1Timestamp, required
        - `seconds` string, required
        - `nanos` string, required
      - `updatedAt` Externaldatav1Timestamp, required
        - `seconds` string, required
        - `nanos` string, required
      - `expirationSeconds` string, uint64 — Optional window (in seconds) indicating how long the API Key should last.
    - `userTags` string[], required — A list of User Tag IDs.
    - `oauthProviders` V1OauthProvider[], required — A list of Oauth Providers.
      - `providerId` string, required — Unique identifier for an OAuth Provider
      - `providerName` string, required — Human-readable name to identify a Provider.
      - `issuer` string, required — The issuer of the token, typically a URL indicating the authentication server, e.g https://accounts.google.com
      - `audience` string, required — Expected audience ('aud' attribute of the signed token) which represents the app ID
      - `subject` string, required — Expected subject ('sub' attribute of the signed token) which represents the user ID
      - `createdAt` Externaldatav1Timestamp, required
        - `seconds` string, required
        - `nanos` string, required
      - `updatedAt` Externaldatav1Timestamp, required
        - `seconds` string, required
        - `nanos` string, required
    - `createdAt` Externaldatav1Timestamp, required
      - `seconds` string, required
      - `nanos` string, required
    - `updatedAt` Externaldatav1Timestamp, required
      - `seconds` string, required
      - `nanos` string, required

## Other responses

- `default` — An unexpected error response.

---

[API](https://skmtc.dev/turnkey/apis/api-reference.md) · [All operations](https://skmtc.dev/turnkey/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/turnkey/api-reference/revisions/4d8a7c63c511/schema)