Skip to content
Kindgi

List service accounts

View as Markdown
GET
/v1/service-accounts
curl --request GET \
  --url 'https://example.com/v1/service-accounts?limit=25&includeUnregistered=true' \
  --header 'Authorization: Bearer <token>'

Oldest first; active only unless ?includeUnregistered=true. Tenant admins only.

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Query Parameters

Section titled “Query Parameters”
cursor
string

Where the previous page ended: its nextCursor, as it came. A runtime that seals cursors takes one only for the same list, filters and caller, within a day; otherwise 400 bad-input, and the list starts again without it. Absent → first page.

limit
integer
default: 25 >= 1 <= 100

1..100. Default 25.

includeUnregistered
string
Allowed values: true false

true: unregistered accounts too.

Responses

Section titled “Responses”

200

Section titled “200”

A page of service accounts.

Media typeapplication/json
object
data
required
Array<object>

A named, non-human principal (service_account:<id>) for an app, a pipeline or a schedule. It acts through API keys minted for it.

object
serviceAccountId
required
string
name
required

Unique among the tenant’s active accounts.

string
description
string
grants
required
Array
One of: discriminator: kind

Tenant admin.

object
kind
required
string
Allowed values: tenant-admin
createdBy

Who created it: user:<id> or service_account:<id>.

string
createdAt
required
string format: date-time
unregisteredAt

Set once unregistered: it has no grants, and its keys no longer work.

string format: date-time
projectId

Set on a project’s own account: made by the first trigger that runs as the project (runAsProject), with the editor role on it. It runs only the triggers with runAsProject, not the project’s other shared triggers. It has no keys, and its grant is fixed. Unregistering it stops those triggers until an admin takes each over; deleting the project unregisters it.

string
hasMore
required
boolean
nextCursor
string
Example
{
  "data": [
    {
      "grants": [
        {
          "kind": "tenant-admin"
        }
      ]
    }
  ]
}

401

Section titled “401”

Missing / malformed / expired / revoked bearer token.

Media typeapplication/json
object
error
required
object
code
required

Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).

string
message
required
string
details

Optional, kind-specific.

object
key
additional properties
any
requestId
required

Server-assigned request id; also echoed via X-Request-Id header.

string
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": {},
    "requestId": "example"
  }
}

403

Section titled “403”

Not a tenant admin.

Media typeapplication/json
object
error
required
object
code
required

Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).

string
message
required
string
details

Optional, kind-specific.

object
key
additional properties
any
requestId
required

Server-assigned request id; also echoed via X-Request-Id header.

string
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": {},
    "requestId": "example"
  }
}

503

Section titled “503”

The database was too busy to answer in time (database-busy); Retry-After (whole seconds) says when to try again.

Media typeapplication/json
object
error
required
object
code
required

Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).

string
message
required
string
details

Optional, kind-specific.

object
key
additional properties
any
requestId
required

Server-assigned request id; also echoed via X-Request-Id header.

string
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": {},
    "requestId": "example"
  }
}

See also