List machine access principals
GET
/api/admin/machine-access/principals
Code sample: Shell / cURL
curl --request GET \ --url 'https://auth.example.com/api/admin/machine-access/principals?status=active' \ --header 'Authorization: Bearer <token>'List machine principals visible to the current admin, including effective permissions, tenant scopes, and credentials.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Query Parameters
Section titled “Query Parameters ” status
string
Principal status filter.
principal_type
string
Principal type filter.
page
integer format: int64
One-based page number.
limit
integer format: int64
Maximum number of principals to return.
Responses
Section titled “ Responses ”Machine principal list.
Media type application/json
object
items
required
Array<object>
object
id
string
clientId
string
displayName
string
principalType
string
status
string
tokenTtlSeconds
integer format: int64
createdAt
integer format: int64
updatedAt
integer format: int64
permissions
Array<string>
tenantScopes
credentials
Array<object>
object
id
string
principalId
string
kid
string
publicJwkJson
string
alg
string
displayName
string
status
string
createdAt
integer format: int64
updatedAt
integer format: int64
page
required
integer format: int64
limit
required
integer format: int64
Example
{ "items": [ { "id": "amp_123", "clientId": "setup-tool", "displayName": "Setup Tool", "description": "Automation used by setup.", "principalType": "setup_tool", "status": "active", "tokenTtlSeconds": 600, "createdAt": 1770000000000, "updatedAt": 1770000000000, "permissions": [ "admin:tenants:read" ], "tenantScopes": [ { "scopeMode": "allow", "tenantId": "tenant_123" } ], "credentials": [] } ], "page": 1, "limit": 50}default
Section titled “default ”Error response.
Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{ "error": "example", "message": "example", "error_description": "example"}