---
title: "Get End User"
method: GET
path: "/api/v1/end-users/{id}"
tags: ["End Users"]
---

# Get End User

`GET /api/v1/end-users/{id}`

Gets the end user that corresponds to the given ID.

## Path parameters

- `id` string, uuid, required — ID of the end user to retrieve.

## Response `200`

Successful Response

- GetEndUserResponse
  - `id` string, uuid, required — The unique identifier of the object in the Fordefi platform.
  - `created_at` string, date-time, required — The date and time when the object was created.
  - `modified_at` string, date-time, required — The date and time when the object was last modified. Any change to any field of the resource is considered a modification.
  - `external_id` string, required — The ID that you assigned to the end user.
  - `last_login_at` string, date-time, required — The timestamp when the end user last logged into the mobile SDK.
  - `desired_key_types` KeyType[] — Desired key types. This field is populated by the user during keyset generation.
  - `keyset_id` string, uuid, required — The unique identifier of the keyset.
  - `ecdsa` KeysetKey
    - `id` string, uuid, required — The ID of the key.
    - `xpub` string, required — The xpub encoding of the key. For more details, see https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#serialization-format
    - `encrypted_shares` KeyShares, required
      - `device` string — Device latest encrypted share for the key.
      - `platform` string[] — Platform encrypted shares for the key. Whether it contains one or two shares depends on the backup type.
    - `chain_code` string, required — The chain code of the key. It is used to derive child keys.
  - `eddsa` KeysetKey
    - `id` string, uuid, required — The ID of the key.
    - `xpub` string, required — The xpub encoding of the key. For more details, see https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#serialization-format
    - `encrypted_shares` KeyShares, required
      - `device` string — Device latest encrypted share for the key.
      - `platform` string[] — Platform encrypted shares for the key. Whether it contains one or two shares depends on the backup type.
    - `chain_code` string, required — The chain code of the key. It is used to derive child keys.
  - `ecdsa_stark` KeysetKey
    - `id` string, uuid, required — The ID of the key.
    - `xpub` string, required — The xpub encoding of the key. For more details, see https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#serialization-format
    - `encrypted_shares` KeyShares, required
      - `device` string — Device latest encrypted share for the key.
      - `platform` string[] — Platform encrypted shares for the key. Whether it contains one or two shares depends on the backup type.
    - `chain_code` string, required — The chain code of the key. It is used to derive child keys.
  - `schnorr_secp256k1` KeysetKey
    - `id` string, uuid, required — The ID of the key.
    - `xpub` string, required — The xpub encoding of the key. For more details, see https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#serialization-format
    - `encrypted_shares` KeyShares, required
      - `device` string — Device latest encrypted share for the key.
      - `platform` string[] — Platform encrypted shares for the key. Whether it contains one or two shares depends on the backup type.
    - `chain_code` string, required — The chain code of the key. It is used to derive child keys.
  - `auth_public_key` string — The public key of the user's auth-key.
  - `encrypted_device_auth_key` string — An encrypted backup of the user's auth-key.
  - `encrypted_device_shares_backups` EncryptedDeviceSharesBackup[] — Encrypted device shares backups.
    - `id` string — The ID of the backup. Not provided for organization keysets.
    - `created_at` string, date-time, required — The time the backup was created.
    - `ecdsa` string — Device ECDSA encrypted share
    - `eddsa` string — Device EdDSA encrypted share
    - `ecdsa_stark` string — Device ECDSA stark encrypted share
    - `schnorr_secp256k1` string — Device Schnorr secp256k1 encrypted share
    - `auth_key` string — An encrypted backup of the user's auth-key.
  - `last_backup_at` string, date-time, required — The last time backup was intitated.
  - `export_allowed` boolean, required — Whether the user is allowed to export the keyset.
  - `last_export_at` string, date-time, required — The last time the keyset was exported.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized User
- `403` — Forbidden User
- `404` — Not Found
- `408` — Request Timeout
- `422` — Validation Error
- `429` — Rate Limit Exceeded
- `500` — Unexpected Error

---

[API](https://skmtc.net/fordefi/apis/fordefi-api.md) · [All operations](https://skmtc.net/fordefi/apis/fordefi-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fordefi/fordefi-api/versions/8014fd69ea17/schema)