---
title: "List Suspicious Users"
method: GET
path: "/user"
---

# List Suspicious Users

`GET /user`

This endpoint returns a list of suspicious users.

## Response `200`

Successful operation.

- User[]
  - `userId` string — The user ID of the suspicious user.

## Other responses

- `500` — Internal server error.

---

[API](https://skmtc.net/safetorun/apis/promptdefender-pii-and-prompt-injection-verification-service.md) · [All operations](https://skmtc.net/safetorun/apis/promptdefender-pii-and-prompt-injection-verification-service/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/safetorun/promptdefender-pii-and-prompt-injection-verification-service/revisions/d7e556f931cd/schema)