Auth0 Management API — Users

naftiko: 1.0.0-alpha2
info:
  label: "Auth0 Management API \u2014 Users"
  description: Auth0 Management API capability covering the Users resource group (23 paths). Self-contained Naftiko capability covering one Auth0
    Management surface. 37 operations.
  tags:
  - Auth0
  - Management API
  - Users
  created: '2026-05-22'
  modified: '2026-05-22'
binds:
- namespace: env
  keys:
    AUTH0_DOMAIN: AUTH0_DOMAIN
    AUTH0_MGMT_TOKEN: AUTH0_MGMT_TOKEN
capability:
  consumes:
  - type: http
    namespace: auth0-management-users
    baseUri: https://{AUTH0_DOMAIN}/api/v2
    description: "Auth0 Management API \u2014 Users resource group. Self-contained."
    resources:
    - name: users
      path: /users
      operations:
      - name: get_users
        method: GET
        description: List or Search Users
        outputRawFormat: json
      - name: post_users
        method: POST
        description: Create a User
        outputRawFormat: json
    - name: users-id
      path: /users/{id}
      operations:
      - name: get_users_by_id
        method: GET
        description: Get a User
        outputRawFormat: json
      - name: delete_users_by_id
        method: DELETE
        description: Delete a User
        outputRawFormat: json
      - name: patch_users_by_id
        method: PATCH
        description: Update a User
        outputRawFormat: json
    - name: users-id-authentication-methods
      path: /users/{id}/authentication-methods
      operations:
      - name: get_authentication-methods
        method: GET
        description: Get a List of Authentication Methods
        outputRawFormat: json
      - name: delete_authentication-methods
        method: DELETE
        description: Delete All Authentication Methods for the Given User
        outputRawFormat: json
      - name: post_authentication-methods
        method: POST
        description: Creates an Authentication Method for a Given User
        outputRawFormat: json
      - name: put_authentication-methods
        method: PUT
        description: Update All Authentication Methods by Replacing Them with the Given Ones
        outputRawFormat: json
    - name: users-id-authentication-methods-authentication_method_id
      path: /users/{id}/authentication-methods/{authentication_method_id}
      operations:
      - name: get_authentication-methods_by_authentication_method_id
        method: GET
        description: Get an Authentication Method by ID
        outputRawFormat: json
      - name: delete_authentication-methods_by_authentication_method_id
        method: DELETE
        description: Delete an Authentication Method by ID
        outputRawFormat: json
      - name: patch_authentication-methods_by_authentication_method_id
        method: PATCH
        description: Update an Authentication Method
        outputRawFormat: json
    - name: users-id-authenticators
      path: /users/{id}/authenticators
      operations:
      - name: delete_authenticators
        method: DELETE
        description: Delete All Authenticators
        outputRawFormat: json
    - name: users-id-connected-accounts
      path: /users/{id}/connected-accounts
      operations:
      - name: get_connected-accounts
        method: GET
        description: Get a User's Connected Accounts
        outputRawFormat: json
    - name: users-id-enrollments
      path: /users/{id}/enrollments
      operations:
      - name: get_enrollments
        method: GET
        description: Get the First Confirmed Multi-factor Authentication (MFA) Enrollment
        outputRawFormat: json
    - name: users-id-federated-connections-tokensets
      path: /users/{id}/federated-connections-tokensets
      operations:
      - name: get_federated-connections-tokensets
        method: GET
        description: Get Tokensets for a User
        outputRawFormat: json
    - name: users-id-federated-connections-tokensets-tokenset_id
      path: /users/{id}/federated-connections-tokensets/{tokenset_id}
      operations:
      - name: delete_federated-connections-tokensets_by_tokenset_id
        method: DELETE
        description: Deletes a Tokenset for Federated Connections by Id.
        outputRawFormat: json
    - name: users-id-groups
      path: /users/{id}/groups
      operations:
      - name: get_user_groups
        method: GET
        description: Get User's Groups
        outputRawFormat: json
    - name: users-id-identities
      path: /users/{id}/identities
      operations:
      - name: post_identities
        method: POST
        description: Link a User Account
        outputRawFormat: json
    - name: users-id-identities-provider-user_id
      path: /users/{id}/identities/{provider}/{user_id}
      operations:
      - name: delete_user_identity_by_user_id
        method: DELETE
        description: Unlink a User Identity
        outputRawFormat: json
    - name: users-id-logs
      path: /users/{id}/logs
      operations:
      - name: get_logs_by_user
        method: GET
        description: Get User's Log Events
        outputRawFormat: json
    - name: users-id-multifactor-actions-invalidate-remember-browser
      path: /users/{id}/multifactor/actions/invalidate-remember-browser
      operations:
      - name: post_invalidate-remember-browser
        method: POST
        description: Invalidate All Remembered Browsers for Multi-factor Authentication (MFA)
        outputRawFormat: json
    - name: users-id-multifactor-provider
      path: /users/{id}/multifactor/{provider}
      operations:
      - name: delete_multifactor_by_provider
        method: DELETE
        description: Delete a User's Multi-factor Provider
        outputRawFormat: json
    - name: users-id-organizations
      path: /users/{id}/organizations
      operations:
      - name: get_user_organizations
        method: GET
        description: List User's Organizations
        outputRawFormat: json
    - name: users-id-permissions
      path: /users/{id}/permissions
      operations:
      - name: get_permissions
        method: GET
        description: Get a User's Permissions
        outputRawFormat: json
      - name: delete_permissions
        method: DELETE
        description: Remove Permissions from a User
        outputRawFormat: json
      - name: post_permissions
        method: POST
        description: Assign Permissions to a User
        outputRawFormat: json
    - name: users-id-recovery-code-regeneration
      path: /users/{id}/recovery-code-regeneration
      operations:
      - name: post_recovery-code-regeneration
        method: POST
        description: Generate New Multi-factor Authentication (MFA) Recovery Code
        outputRawFormat: json
    - name: users-id-revoke-access
      path: /users/{id}/revoke-access
      operations:
      - name: user_revoke_access
        method: POST
        description: Revokes Selected Resources from a User
        outputRawFormat: json
    - name: users-id-risk-assessments-clear
      path: /users/{id}/risk-assessments/clear
      operations:
      - name: post_clear_assessors
        method: POST
        description: Clear Risk Assessment Assessors for a Specific User
        outputRawFormat: json
    - name: users-id-roles
      path: /users/{id}/roles
      operations:
      - name: get_user_roles
        method: GET
        description: Get a User's Roles
        outputRawFormat: json
      - name: delete_user_roles
        method: DELETE
        description: Removes Roles from a User
        outputRawFormat: json
      - name: post_user_roles
        method: POST
        description: Assign Roles to a User
        outputRawFormat: json
    - name: users-user_id-refresh-tokens
      path: /users/{user_id}/refresh-tokens
      operations:
      - name: get_refresh_tokens_for_user
        method: GET
        description: Get Refresh Tokens for a User
        outputRawFormat: json
      - name: delete_refresh_tokens_for_user
        method: DELETE
        description: Delete Refresh Tokens for a User
        outputRawFormat: json
    - name: users-user_id-sessions
      path: /users/{user_id}/sessions
      operations:
      - name: get_sessions_for_user
        method: GET
        description: Get Sessions for User
        outputRawFormat: json
      - name: delete_sessions_for_user
        method: DELETE
        description: Delete Sessions for User
        outputRawFormat: json