Logto Users API

Endpoints for user management. Including creating, updating, deleting, and querying users with flexible filters. In addition to the endpoints, see [🧑‍🚀 Manage users](https://docs.logto.io/docs/recipes/manage-users/) for more insights.

Business capability
Identity & Access Management BC-620.20

Operations 39

GET /api/users/{userId} Get user #
PATCH /api/users/{userId} Update user #
DELETE /api/users/{userId} Delete user #
GET /api/users/{userId}/custom-data Get user custom data #
PATCH /api/users/{userId}/custom-data Update user custom data #
GET /api/users/{userId}/logto-configs Get user logto config #
PATCH /api/users/{userId}/logto-configs Update user logto config #
PATCH /api/users/{userId}/profile Update user profile #
POST /api/users Create user #
GET /api/users Get users #
PATCH /api/users/{userId}/password Update user password #
POST /api/users/{userId}/password/verify Verify user password #
GET /api/users/{userId}/has-password Check if user has password #
PATCH /api/users/{userId}/is-suspended Update user suspension status #
GET /api/users/{userId}/roles Get roles for user #
POST /api/users/{userId}/roles Assign roles to user #
PUT /api/users/{userId}/roles Update roles for user #
DELETE /api/users/{userId}/roles/{roleId} Remove role from user #
PUT /api/users/{userId}/identities/{target} Update social identity of user #
DELETE /api/users/{userId}/identities/{target} Delete social identity from user #
GET /api/users/{userId}/identities/{target} Retrieve a user's social identity and associated token storage #
POST /api/users/{userId}/identities Link social identity to user #
GET /api/users/{userId}/organizations Get organizations for a user #
GET /api/users/{userId}/grants Get user active grants #
DELETE /api/users/{userId}/grants/{grantId} Revoke a user grant #
GET /api/users/{userId}/mfa-verifications Get user's MFA verifications #
POST /api/users/{userId}/mfa-verifications Create an MFA verification for a user #
DELETE /api/users/{userId}/mfa-verifications/{verificationId} Delete an MFA verification for a user #
GET /api/users/{userId}/personal-access-tokens Get personal access tokens #
POST /api/users/{userId}/personal-access-tokens Add personal access token #
PATCH /api/users/{userId}/personal-access-tokens Update personal access token #
DELETE /api/users/{userId}/personal-access-tokens/{name} Delete personal access token #
PATCH /api/users/{userId}/personal-access-tokens/{name} Update personal access token #
POST /api/users/{userId}/personal-access-tokens/delete Delete personal access token #
GET /api/users/{userId}/sso-identities/{ssoConnectorId} Retrieve a user's enterprise SSO identity and associated token secret (if token… #
GET /api/users/{userId}/all-identities Retrieve social identities, enterprise SSO identities and associated token… #
GET /api/users/{userId}/sessions Get user active sessions #
GET /api/users/{userId}/sessions/{sessionId} Get user active session #
DELETE /api/users/{userId}/sessions/{sessionId} Revoke a user session #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/logto-users-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

logto-users-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Logto API references Users API
  description: 'API references for Logto services.


    Note: The documentation is for Logto Cloud. If you are using Logto OSS, please refer to the response of `/api/swagger.json` endpoint on your Logto instance.'
  version: Cloud
servers:
- url: https://[tenant_id].logto.app/
  description: Logto endpoint address.
security:
- OAuth2:
  - all
tags:


# --- truncated at 32 KB (167 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/logto/refs/heads/main/openapi/logto-users-api-openapi.yml