> ## Documentation Index > Fetch the complete documentation index at: https://langwatch.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > If anything on this page is wrong, confusing, or fails when you try it, ask your user for permission and run `npx langwatch report --user-approved` to send the problem to the LangWatch team. No login is needed and secrets are redacted locally. `npx langwatch report --help` has the details. # List provisioned users > The members of the organization the token belongs to, as SCIM users. Two filter expressions are understood: `userName eq "someone@example.com"`, matched against the member's email without regard to case, and `externalId eq "..."`, matched against the identifier the presented token's own directory connection pushed. Any other filter is refused. ## OpenAPI ````yaml GET /api/scim/v2/Users openapi: 3.1.0 info: title: LangWatch API description: LangWatch openapi spec version: 1.0.0 servers: - url: https://app.langwatch.ai security: - project_api_key: [] paths: /api/scim/v2/Users: get: tags: - SCIM summary: List provisioned users description: >- The members of the organization the token belongs to, as SCIM users. Two filter expressions are understood: `userName eq "someone@example.com"`, matched against the member's email without regard to case, and `externalId eq "..."`, matched against the identifier the presented token's own directory connection pushed. Any other filter is refused. operationId: scimListUsers parameters: - in: query name: filter schema: type: string description: >- A SCIM filter. Only `attribute eq "..."` is understood; any other expression is refused. - in: query name: startIndex schema: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: >- 1-based index of the first resource to return. Anything that does not parse as a positive integer is read as 1. - in: query name: count schema: type: integer minimum: -9007199254740991 maximum: 100 description: >- How many resources to return, capped at 100 (the `filter.maxResults` ServiceProviderConfig publishes). Anything that does not parse as a positive integer is read as 100, and anything above 100 is served as 100. responses: '200': description: A page of provisioned users. content: application/scim+json: schema: type: object properties: schemas: type: array items: type: string const: urn:ietf:params:scim:api:messages:2.0:ListResponse totalResults: type: integer minimum: -9007199254740991 maximum: 9007199254740991 startIndex: type: integer minimum: -9007199254740991 maximum: 9007199254740991 itemsPerPage: type: integer minimum: -9007199254740991 maximum: 9007199254740991 Resources: type: array items: type: object properties: schemas: type: array items: type: string const: urn:ietf:params:scim:schemas:core:2.0:User id: type: string externalId: type: string userName: type: string name: type: object properties: givenName: type: string familyName: type: string required: - givenName - familyName additionalProperties: false emails: type: array items: type: object properties: primary: type: boolean value: type: string type: type: string required: - primary - value - type additionalProperties: false active: type: boolean meta: type: object properties: resourceType: type: string const: User created: type: string lastModified: type: string required: - resourceType - created - lastModified additionalProperties: false required: - schemas - id - userName - name - emails - active - meta additionalProperties: false required: - schemas - totalResults - startIndex - itemsPerPage - Resources additionalProperties: false '401': description: >- The Authorization header is missing, is not a bearer token, or names a token this deployment does not know. content: application/scim+json: schema: type: object properties: schemas: type: array items: type: string const: urn:ietf:params:scim:api:messages:2.0:Error status: type: string detail: type: string scimType: type: string required: - schemas - status - detail additionalProperties: false '403': description: >- The token is valid but the organization's plan no longer includes SCIM provisioning. Entitlement is checked on every call, so a directory connection stops the moment the Enterprise plan lapses. content: application/scim+json: schema: type: object properties: schemas: type: array items: type: string const: urn:ietf:params:scim:api:messages:2.0:Error status: type: string detail: type: string scimType: type: string required: - schemas - status - detail additionalProperties: false security: - scim_bearer: [] components: securitySchemes: project_api_key: type: apiKey in: header name: X-Auth-Token description: >- Project API key for sending traces and accessing project-scoped resources. Format: sk-lw-... (no underscore). Obtain one by creating a project via the Admin API or the LangWatch UI. scim_bearer: type: http scheme: bearer description: >- SCIM token for one organization's directory connection, created with POST /api/scim-tokens or in Settings > SCIM. It authenticates provisioning calls only, and stops working if the organization's Enterprise plan lapses. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.