GET /v1/orgs/:org_id/members
List all members of an organization.
::: tip Auth
Required: cookie or Bearer. Required permission: members.list. Caller's
org must match the path's org_id.
:::
Request
GET /v1/orgs/:org_id/members
Response
200 OK
{
"members": [
{
"user_id": "1c8b2a5e-...",
"email": "alice@example.com",
"display_name": "Alice Anderson",
"role": "owner",
"joined_at": "2026-04-01T10:00:00+00:00",
"avatar_url": "https://files.example.com/avatars/1c8b2a5e/abc.png"
},
{
"user_id": "b7e2f1c4-...",
"email": "bob@example.com",
"display_name": "Bob B.",
"role": "admin",
"joined_at": "2026-04-15T10:00:00+00:00",
"avatar_url": null
}
]
}
Error responses
| Status | Code | When |
|---|---|---|
| 401 | authentication_required | No valid auth credential. |
| 403 | forbidden | Org mismatch or missing members.list permission. |
Notes
- Includes the caller themselves.
- Order is database-defined (not stable across calls). Sort on the client.