API referenceCompliance APIUsers & rolesList users

List users

⚠️
Preview — this feature is being built; the design below is the spec.
GET https://app.syntic.ai/v1/compliance/users

Return every person who has been a member of the organization, including people who were removed, so records can be tied to an identity long after someone leaves.

For how this fits into a full workflow, see Compliance API.

Headers

HeaderRequiredValue
AuthorizationYesBearer <admin key>: an Admin API key (sk_admin_...) that carries the compliance:read scope (plus compliance:write for deletions and holds). Enterprise plans only. See Compliance API.
syntic-betaYes, while in previewcompliance-2026-12-01. Without it the call fails with 400 beta_required. See Versioning.

Query parameters

ParameterTypeDefaultDescription
statusstringallactive, removed or all.
emailstring
limitinteger201 to 100.
after_idstringNext page: the previous page’s last_id.
before_idstringPrevious page: the previous page’s first_id.

Response

200 OK, Content-Type: application/json

{
  "data": [
    {
      "id": "user_01J9Y0A2C4E6G8J0L2N4",
      "type": "compliance_user",
      "email": "dana@example.com",
      "name": "Dana Lee",
      "status": "active",
      "role_ids": [
        "role_01JCT6U8W0Y2A4C6E8G0"
      ],
      "products": [
        "chat",
        "code",
        "api"
      ],
      "joined_at": "2026-02-10T14:00:00Z",
      "removed_at": null
    }
  ],
  "has_more": false,
  "first_id": "user_01J9Y0A2C4E6G8J0L2N4",
  "last_id": "user_01J9Y0A2C4E6G8J0L2N4"
}
FieldTypeDescription
productsarrayProducts the person has used.
removed_atstring or nullWhen they left the organization.
has_morebooleantrue when another page exists after this one.
first_idstring or nullPass as before_id to go back a page.
last_idstring or nullPass as after_id to get the next page.

Examples

curl -sS "https://app.syntic.ai/v1/compliance/users" \
  -H "Authorization: Bearer $SYNTIC_ADMIN_KEY" \
  -H "syntic-beta: compliance-2026-12-01"

Errors

Errors use the error envelope and carry a request_id. Codes specific to this operation:

StatustypecodeWhen
400invalid_request_errorbeta_requiredThe syntic-beta header is missing.
401authentication_errorinvalid_api_keyThe admin key is missing, unknown, revoked or expired.
403permission_erroradmin_key_requiredAn inference key was used.
403permission_errorscope_missingThe admin key lacks the compliance:read (or, for writes, compliance:write) scope.
429rate_limit_errorrate_limitedToo many requests; wait for Retry-After. See Rate-limit headers.
Was this page helpful?