GET
/api/v1/users
Lists every member of the authenticated team, owner included, with the fields an access review needs: role, active/disabled status, MFA state, when they were added, and when they last signed in.
Response
{
"team": "Acme",
"total": 2,
"data": [
{
"id": 7,
"name": "Ada Lovelace",
"email": "[email protected]",
"role": "owner",
"status": "active",
"mfa_enabled": true,
"created_at": "2026-01-05T09:12:00Z",
"added_at": "2026-01-05T09:12:00Z",
"last_login_at": "2026-08-13T21:40:11Z"
},
{
"id": 12,
"name": "Sam Infra",
"email": "[email protected]",
"role": "editor",
"status": "active",
"mfa_enabled": false,
"created_at": "2026-08-13T19:52:00Z",
"added_at": "2026-08-13T19:53:10Z",
"last_login_at": "2026-08-14T02:01:44Z"
}
]
}Fields
| Field | Description |
|---|---|
role | owner, admin, editor, or viewer |
status | active, or disabled when the account is suspended |
mfa_enabled | Whether two-factor authentication is confirmed on the account |
added_at | When they joined this team (the team's creation date for the owner) |
last_login_at | Most recent sign-in, including OAuth sign-ins; null if never |