End users
End users are your application’s users (distinct from org members — see Authentication model). Each one carries an org-scoped identity badge — see Connected ID — but is not a member of your organization and carries no membership grade. Base path: /api/org/{slug}/endusers (authenticated org admin).
| Method · Route | Purpose | Source |
|---|---|---|
GET / | List end users (paged: page, pageSize, search, status, appGroupId) | EndUserEndpoints.cs:29 |
POST / | Create / invite an end user | :224 |
POST /bulk-import | Bulk import (added 2026-08-04) — body { appGroupId, users: [{ email, displayName? }] }, up to 500 rows. Same creation path as single create: each user is created Pending with an org identity, granted app access, and sent a Magic Link invite (in the background — failures recover via resend). Returns per-row results: created / duplicate / invalid. | EndUserEndpoints.cs |
POST /{endUserId}/resend-invite | Resend invite | :284 |
PATCH /{endUserId}/suspend | Suspend | :43 |
PATCH /{endUserId}/activate | Activate | :62 |
DELETE /{endUserId} | Delete | :116 |
DELETE /{endUserId}/groups/{groupId} | Remove from an app group | :166 |
The invite verification is a public route — POST /api/enduser/verify-invite (:313). End-user authentication flows (passkey / magic-link / social) live under /api/public/apps/{applicationKey}/auth/* — see Quickstart and the OIDC reference.