Auth0

Auth0 Users API

The users API from Auth0 — 23 operation(s) for users.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 37

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /users List or search users in a tenant · List or Search Users #
Ask an LLM
“How do I search my Auth0 users by email or a metadata field?”
“Can I sort the user list and page through it a few dozen at a time?”
Tell an agent
Search users matching {q}.
List users from the {connection} connection, {per_page} per page.
POST /users Create a user in a connection · Create a User #
Ask an LLM
“How do I add a new user to a database connection?”
“Can I create a user and set their password and metadata at the same time?”
Tell an agent
Create a user {email} in the {connection} connection.
Create user {email} in {connection} with password {password}.
GET /users/{id} Get a user's profile by ID · Get a User #
Ask an LLM
“What does the full profile of a single user look like by user ID?”
“Can I fetch only certain fields of one user's profile?”
Tell an agent
Show me the profile for user {id}.
Get only the {fields} fields of user {id}.
DELETE /users/{id} Delete a user permanently · Delete a User #
Ask an LLM
“How do I permanently delete a user account?”
“Is deleting a user reversible once it's done?”
Tell an agent destructive · confirm first
Delete user {id} permanently.
Remove the account of user {id} from the tenant.
PATCH /users/{id} Update a user's profile · Update a User #
Ask an LLM
“Can I change a user's email address or block their account?”
“How do I update a user's app_metadata or user_metadata?”
Tell an agent
Block user {id}.
Change the email of user {id} to {email}.
GET /users/{id}/authentication-methods List a user's authentication methods · Get a List of Authentication Methods #
Ask an LLM
“Which MFA authentication methods has a user enrolled?”
“Can I see every authentication method attached to one user?”
Tell an agent
List the authentication methods of user {id}.
Show all enrolled factors for user {id} with totals.
DELETE /users/{id}/authentication-methods Remove all of a user's authentication methods · Delete All Authentication Methods for the Given User #
Ask an LLM
“How do I wipe every MFA factor a user has enrolled?”
“Can I clear all authentication methods for a locked-out user?”
Tell an agent destructive · confirm first
Remove all authentication methods from user {id}.
Clear every enrolled MFA factor on user {id}.
POST /users/{id}/authentication-methods Add an authentication method to a user · Creates an Authentication Method for a Given User #
Ask an LLM
“How do I enroll a phone or TOTP factor for a user on their behalf?”
“Can I add a pre-verified authentication method to a user account?”
Tell an agent
Add a {type} authentication method to user {id}.
Enroll phone {phone_number} as an SMS factor for user {id} as type {type}.
PUT /users/{id}/authentication-methods Replace all of a user's authentication methods · Update All Authentication Methods by Replacing Them with the Given Ones #
Ask an LLM
“Can I overwrite a user's whole set of authentication methods in one call?”
“What happens to existing factors when I replace a user's authentication methods?”
Tell an agent
Replace every authentication method of user {id} with a new set.
Overwrite user {id}'s enrolled factors with the ones I provide.
GET /users/{id}/authentication-methods/{authentication_method_id} Get one authentication method of a user · Get an Authentication Method by ID #
Ask an LLM
“Can I look up the details of one specific authentication method on a user?”
“What information is stored for a single enrolled factor?”
Tell an agent
Show authentication method {authentication_method_id} of user {id}.
Get the details of factor {authentication_method_id} for user {id}.
DELETE /users/{id}/authentication-methods/{authentication_method_id} Remove one authentication method from a user · Delete an Authentication Method by ID #
Ask an LLM
“How do I remove just one enrolled factor from a user and keep the rest?”
“Can I delete a single lost phone factor from someone's account?”
Tell an agent destructive · confirm first
Delete authentication method {authentication_method_id} from user {id}.
Remove only factor {authentication_method_id} on user {id}.
PATCH /users/{id}/authentication-methods/{authentication_method_id} Rename or prefer a user's authentication method · Update an Authentication Method #
Ask an LLM
“Can I rename a user's authentication method or make it their preferred one?”
“How do I change which enrolled factor a user is prompted with first?”
Tell an agent
Rename authentication method {authentication_method_id} of user {id} to {name}.
Set the preferred method of factor {authentication_method_id} for user {id} to {preferred_authentication_method}.
DELETE /users/{id}/authenticators Remove all authenticators from a user · Delete All Authenticators #
Ask an LLM
“Can I delete every authenticator a user registered, like OTP, push and email?”
“What's the way to reset all of a user's MFA authenticators at once?”
Tell an agent destructive · confirm first
Delete all authenticators registered to user {id}.
Reset user {id}'s OTP, push, email and phone authenticators.
GET /users/{id}/connected-accounts List a user's connected accounts · Get a User's Connected Accounts #
Ask an LLM
“Which connected accounts are linked to a user?”
“Can I page through a user's connected accounts with a checkpoint?”
Tell an agent
List connected accounts for user {id}.
Show {take} connected accounts of user {id} starting from {from}.
GET /users/{id}/enrollments Get a user's first confirmed MFA enrollment · Get the First Confirmed Multi-factor Authentication (MFA) Enrollment #
Ask an LLM
“Has this user confirmed an MFA enrollment yet?”
“What is the first multi-factor enrollment a user completed?”
Tell an agent
Get the first confirmed MFA enrollment of user {id}.
Check whether user {id} has finished MFA enrollment.
GET /users/{id}/federated-connections-tokensets List a user's federated connection tokensets · Get Tokensets for a User #
Ask an LLM
“Which federated connection tokensets are active for a user?”
“Can I see the token sets stored for a user's federated connections?”
Tell an agent
List active federated tokensets for user {id}.
Show the federated connection token sets held for user {id}.
DELETE /users/{id}/federated-connections-tokensets/{tokenset_id} Delete a user's federated connection tokenset · Deletes a Tokenset for Federated Connections by Id #
Ask an LLM
“How do I revoke one federated connection tokenset for a user?”
“Can I delete a stored token set from a user's federated connection?”
Tell an agent destructive · confirm first
Delete tokenset {tokenset_id} of user {id}.
Remove federated token set {tokenset_id} from user {id}.
GET /users/{id}/groups List the groups a user belongs to · Get User's Groups #
Ask an LLM
“Which groups is a given user a member of?”
“Can I list a user's group memberships page by page?”
Tell an agent
List the groups user {id} belongs to.
Show {per_page} groups per page for user {id}.
POST /users/{id}/identities Link a secondary account to a user · Link a User Account #
Ask an LLM
“How do I merge a social login account into a user's primary account?”
“Can I link two user accounts so one becomes the primary identity?”
Tell an agent
Link user {user_id} from {provider} to primary user {id}.
Link the account in token {link_with} to user {id}.
DELETE /users/{id}/identities/{provider}/{user_id} Unlink a secondary identity from a user · Unlink a User Identity #
Ask an LLM
“Can I split a linked social identity back out of a primary account?”
“What do I need to unlink a secondary account from a user?”
Tell an agent destructive · confirm first
Unlink the {provider} identity {user_id} from user {id}.
Separate secondary account {user_id} ({provider}) from primary user {id}.
GET /users/{id}/logs Get a user's log events · Get User's Log Events #
Ask an LLM
“What login and activity events were logged for one user?”
“Can I sort a single user's log events by date?”
Tell an agent
Show log events for user {id}.
List user {id}'s log events sorted by {sort}.
POST /users/{id}/multifactor/actions/invalidate-remember-browser Forget a user's remembered MFA browsers · Invalidate All Remembered Browsers for Multi-factor Authentication (MFA) #
Ask an LLM
“How do I force a user to do MFA again on browsers they told us to remember?”
“Can I invalidate all remembered browsers for a user's MFA?”
Tell an agent
Invalidate all remembered MFA browsers for user {id}.
Make user {id} pass MFA again on every browser.
DELETE /users/{id}/multifactor/{provider} Remove a user's multifactor provider · Delete a User's Multi-factor Provider #
Ask an LLM
“Can I remove a specific multifactor provider like Duo from a user's account?”
“Will removing a user's MFA provider make them set it up again?”
Tell an agent destructive · confirm first
Remove the {provider} multifactor provider from user {id}.
Delete user {id}'s {provider} MFA configuration.
GET /users/{id}/organizations List a user's organization memberships · List User's Organizations #
Ask an LLM
“Which organizations does a user currently belong to?”
“Can I count how many organizations a user is a member of?”
Tell an agent
List organizations for user {id}.
Show organization memberships of user {id} with totals.
GET /users/{id}/permissions List a user's direct permissions · Get a User's Permissions #
Ask an LLM
“Which API permissions are assigned to a user?”
“Can I page through all permissions a user holds?”
Tell an agent
List permissions of user {id}.
Show page {page} of user {id}'s permissions.
DELETE /users/{id}/permissions Remove permissions from a user · Remove Permissions from a User #
Ask an LLM
“How do I take a permission away from a user?”
“Can I revoke several directly assigned permissions from one user?”
Tell an agent destructive · confirm first
Remove permissions {permissions} from user {id}.
Revoke the scopes {permissions} held by user {id}.
POST /users/{id}/permissions Assign permissions to a user · Assign Permissions to a User #
Ask an LLM
“How do I grant API permissions directly to a user without a role?”
“Can I give a user several permissions in one request?”
Tell an agent
Assign permissions {permissions} to user {id}.
Grant user {id} the scopes {permissions}.
POST /users/{id}/recovery-code-regeneration Regenerate a user's MFA recovery code · Generate New Multi-factor Authentication (MFA) Recovery Code #
Ask an LLM
“A user lost their MFA recovery code, can I issue a new one?”
“What happens to the old recovery code when I generate a new one?”
Tell an agent
Generate a new MFA recovery code for user {id}.
Replace user {id}'s recovery code.
POST /users/{id}/revoke-access Revoke a user's sessions and tokens · Revokes Selected Resources from a User #
Ask an LLM
“How do I sign a user out of everything by revoking their sessions and refresh tokens?”
“Can I revoke one session for a user but keep their refresh tokens?”
Tell an agent destructive · confirm first
Revoke access for user {id}.
Revoke session {session_id} for user {id}.
POST /users/{id}/risk-assessments/clear Clear risk assessors for a user · Clear Risk Assessment Assessors for a Specific User #
Ask an LLM
“Can I reset the risk assessment data kept for a user, like known devices?”
“How do I clear risk assessors on one connection for a specific user?”
Tell an agent
Clear risk assessors {assessors} for user {id} on {connection}.
Reset the {assessors} risk assessment for user {id} in connection {connection}.
GET /users/{id}/roles List a user's roles · Get a User's Roles #
Ask an LLM
“Which roles are assigned to a user across the whole tenant?”
“Can I page through all roles given to one user?”
Tell an agent
List roles assigned to user {id}.
Show {per_page} of user {id}'s roles per page.
DELETE /users/{id}/roles Remove roles from a user · Removes Roles from a User #
Ask an LLM
“How do I take a role away from a user?”
“Does removing a role from a user apply across the whole tenant?”
Tell an agent destructive · confirm first
Remove roles {roles} from user {id}.
Unassign role {roles} from user {id}.
POST /users/{id}/roles Assign roles to a user · Assign Roles to a User #
Ask an LLM
“How do I give a user an existing role?”
“Can I assign several roles to one user at once?”
Tell an agent
Assign roles {roles} to user {id}.
Give user {id} the roles {roles}.
GET /users/{user_id}/refresh-tokens List a user's refresh tokens · Get Refresh Tokens for a User #
Ask an LLM
“Which refresh tokens does a user currently have?”
“Can I see how many refresh tokens were issued to one user?”
Tell an agent
List refresh tokens for user {user_id}.
Show {take} refresh tokens of user {user_id}.
DELETE /users/{user_id}/refresh-tokens Delete all of a user's refresh tokens · Delete Refresh Tokens for a User #
Ask an LLM
“How do I revoke every refresh token a user holds?”
“Can I invalidate all refresh tokens for a compromised account?”
Tell an agent destructive · confirm first
Delete all refresh tokens for user {user_id}.
Revoke every refresh token issued to user {user_id}.
GET /users/{user_id}/sessions List a user's sessions · Get Sessions for User #
Ask an LLM
“What active sessions does a user have right now?”
“Can I page through a user's login sessions?”
Tell an agent
List sessions for user {user_id}.
Show {take} sessions of user {user_id} from {from}.
DELETE /users/{user_id}/sessions Delete all of a user's sessions · Delete Sessions for User #
Ask an LLM
“How do I end every session a user has open?”
“Can I log a user out of all devices by deleting their sessions?”
Tell an agent destructive · confirm first
Delete all sessions for user {user_id}.
Log user {user_id} out of every session.

Documentation

📖
Documentation
https://auth0.com/docs/api/management/v2
📖
APIReference
https://auth0.com/docs/api/management/v2
📖
GettingStarted
https://auth0.com/docs/get-started
📖
Authentication
https://auth0.com/docs/secure/tokens
📖
Documentation
https://auth0.com/docs/api/authentication
📖
APIReference
https://auth0.com/docs/api/authentication
📖
Documentation
https://docs.fga.dev

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-users-api-openapi.yml
⚙
AsyncAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/asyncapi/auth0-log-streams-and-actions-asyncapi.yml

Other Resources

🔗
OpenAPISource
https://auth0.com/docs/api/management/openapi.json
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-management-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-authentication-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-fga-rules.yml
🔗
Project
https://openfga.dev
🔗
Repository
https://github.com/openfga/openfga

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/auth0:auth0-users-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

auth0-users-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Auth0 Management Users API
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  version: '2.0'
servers:
- url: https://{tenantDomain}/api/v2
  variables:
    tenantDomain:
      default: '{TENANT}.auth0.com'
      description: Auth0 Tenant Domain
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (165 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-users-api-openapi.yml