---
title: "List Identities"
method: GET
path: "/v1/identities"
tags: ["Identities"]
---

# List Identities

`GET /v1/identities`

Shows Identities associated with your account.

**Note:** This endpoint will also return a `pagination` key on the root level.
Please refer to the [pagination section](https://api.huntress.io/docs#pagination) within our docs for more information.

## Query parameters

- `limit` integer
- `page_token` string
- `sort_field` 'id' | 'created_at' | 'updated_at'
- `sort_direction` 'asc' | 'desc'
- `organization_id` integer
- `tenant_type` 'microsoft_365' | 'google_workspace'
- `billable` boolean
- `enabled` boolean
- `external` boolean
- `risk_level` 'none' | 'low' | 'medium' | 'high'
- `mfa_enabled` boolean
- `escalation_id` integer

## Response `200`

List Identities

- object
  - `identities` Identity[], required
    - `id` integer — A unique identifier for the identity.
    - `account` unknown
    - `organization` unknown
    - `tenant` unknown
    - `username` string — The user principal name of the identity.
    - `email` string — The email address of the identity.
    - `enabled` boolean — Whether the identity is enabled in the identity provider.
    - `billable` boolean — Whether the identity has billable licenses or status. Per-identity value; no cross-identity deduplication.
    - `enabled_products` string[] — Huntress products active on the identity's tenant.
    - `mfa_enabled` boolean — Whether MFA or 2-step verification is enabled for this identity.
    - `risk_level` string — The risk level of the identity.
    - `risk_state` string — The risk state of the identity.
    - `risk_detail` string — The risk assessment detail for the identity.
    - `risk_last_updated_at` string, date-time — The last time risk data was synced from Entra, formatted as per ISO-8601.
    - `password_last_changed_at` string, date-time — The last time the password was changed, formatted as per ISO-8601.
    - `on_premises_sync_enabled` boolean — Whether the identity is synced from on-premises Active Directory.
    - `external` boolean — Whether the identity is an external or guest user.
    - `created_at` string, date-time — A timestamp for when the identity was first seen, formatted as per ISO-8601.
    - `updated_at` string, date-time — A timestamp for when the identity was last updated, formatted as per ISO-8601.
  - `pagination` Pagination, required — Pagination model
    - `next_page_url` string
    - `next_page_token` string

## Other responses

- `403` — There was an issue with your API credential or permissions.

---

[API](https://skmtc.net/huntress/apis/huntress-api-reference.md) · [All operations](https://skmtc.net/huntress/apis/huntress-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/huntress/huntress-api-reference/revisions/94acb422c07d/schema)