Tearleads

GET/root/identities

List identities

Operation root.identities.list

Description

Pages every registered identity, newest first, optionally filtered by signing key fingerprint prefix, exact user id, or root operators only. Only root operators may call it, and each request is recorded in the root audit trail.

Authentication

Requires a signed-in session: the client sends its session token as a bearer token in the Authorization header.

Parameters

NameInTypeDetails
cursorquerystringoptional
  • not empty
fingerprintquerystringoptional
  • 8 to 64 characters
  • lowercase hexadecimal
limitqueryintegeroptional
  • 1 to 200
rootOnlyquerybooleanoptional
userIdquerystringoptional
  • lowercase UUID v4

Responses

200 OK

application/jsonRootIdentitiesResponse

A page of registered identities, newest first.

2 fields
  • identitieslist of RootIdentitySummaryResponserequired
  • nextCursorstringrequirednullable

    Opaque cursor for the next page, or null at the end.

Other fields are allowed.

Other responses

StatusMeaningBody
400Bad Request

application/jsonErrorResponse

401Unauthorized

application/jsonSessionFailureResponse

403Forbidden

application/jsonErrorResponse

500Internal Server Error

application/jsonErrorResponse

503Service Unavailable

application/jsonErrorResponse