Skip to content

List team members

GET
/teams/{teamId}/members
curl --request GET \
--url https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/members \
--header 'Authorization: Bearer <token>'

Returns every Qinto user who belongs to the team. Use it to render a team roster or to resolve a person to the userId other tooling (audit logs, support requests) refers to.

How it works

The list is returned in full — it is not paginated. A member’s name fields are null until they complete their profile.

Required permissions

  • team:read on the team
teamId
required

Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.

string format: uuid

Example

7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9

Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.

The team’s full member list.

Media typeapplication/json
object
members
required

Every member of the team; a team always has at least its owner.

Array<object>

A Qinto user’s membership in the team.

object
userId
required

Unique id of the member’s Qinto user account, stable across all teams the user belongs to.

string
email
required

Email address the member signs in with; unique per user.

string
firstName
required

First name from the member’s profile, or null while the profile is incomplete.

string | null
lastName
required

Last name from the member’s profile, or null while the profile is incomplete.

string | null
joinedAt
required

When the user joined the team, as an ISO 8601 UTC timestamp.

string format: date-time

Example

{
"members": [
{
"userId": "9c1f6e73-2b84-4d05-b1a7-58e02c94f6d1",
"email": "jane@example.com",
"firstName": "Jane",
"lastName": "Doe",
"joinedAt": "2026-05-02T09:30:00.000Z"
}
]
}

invalid_params — A path parameter failed validation (for example a malformed UUID); details pinpoints the offending parameter.

Media typeapplication/json
object
error
required

Machine-readable error slug; switch on this value rather than on the HTTP status alone.

string
Allowed values: invalid_params
details

Field-level validation errors: a tree keyed by input property, each node carrying an errors array of human-readable messages. Render it to help the caller correct the request.

object
key
additional properties

Example

{
"error": "invalid_params",
"details": {
"errors": [],
"properties": {
"teamId": {
"errors": [
"Invalid UUID"
]
}
}
}
}

unauthenticated — The Authorization: Bearer token is missing, malformed, or no longer valid. Generate a team API token or obtain a new OAuth access token.

Media typeapplication/json
object
error
required

Machine-readable error slug; switch on this value rather than on the HTTP status alone.

string
Allowed values: unauthenticated

Example

{
"error": "unauthenticated"
}

forbidden — The bearer credential lacks the required permission or belongs to another team, or its user lacks the organization role a developer operation needs. Update its policies, use a credential bound to the addressed team, or ask an organization owner for the role; message states the reason when one is known.

Media typeapplication/json
object
error
required

Machine-readable error slug; switch on this value rather than on the HTTP status alone.

string
Allowed values: forbidden
message

Human-readable reason for this specific failure, intended for display — do not parse it programmatically.

string

Example

{
"error": "forbidden",
"message": "The Cloudflare API token is invalid or expired."
}

internal — Unexpected server error. Nothing is guaranteed to have been persisted; idempotent operations are safe to retry.

Media typeapplication/json
object
error
required

Machine-readable error slug; switch on this value rather than on the HTTP status alone.

string
Allowed values: internal

Example

{
"error": "internal"
}