Users

API reference descriptions are provided in English to preserve the exact published contract.

GETList organization usersusers.list
POSTInvite an organization userusers.create
GETGet an organization userusers.retrieve
PATCHUpdate an organization userusers.update
DELETEDisable an organization userusers.delete
POSTResend an invited member's invitation e-mailusers.invitation

List organization users

GET/v1/accounts/{AC}/users

users.listSDK operation getV1AccountsByAcUsers

Required scope: users:read.Paginated

Parameters

limitinteger (1–100)query
cursorstring (max 2048 chars)query

GET /v1/accounts/{AC}/users

curl "https://api.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/users" \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21"

Responses

Invite an organization user

POST/v1/accounts/{AC}/users

users.createSDK operation postV1AccountsByAcUsers

Required scope: users:write.Idempotency-Key required

Request body

displayNamestring (max 128 chars)Required
emailstring (email, max 320 chars)Required
rolestring (max 64 chars)Required
stepUpTokenstring (max 256 chars)Required
environmentenum
livesandboxboth
inboxSidstring (IB… SID)
scopeKindenum
ORGANIZATIONACCOUNTSUBACCOUNTINBOX

POST /v1/accounts/{AC}/users

curl -X POST "https://api.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/users" \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "displayName": "string",
  "email": "ada@example.com",
  "role": "string",
  "stepUpToken": "string"
}'

Responses

Get an organization user

GET/v1/accounts/{AC}/users/{US}

users.retrieveSDK operation getV1AccountsByAcUsersByUs

Required scope: users:read.

Parameters

USstring (US… SID)Required

GET /v1/accounts/{AC}/users/{US}

curl "https://api.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/users/US..." \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21"

Responses

Update an organization user

PATCH/v1/accounts/{AC}/users/{US}

users.updateSDK operation patchV1AccountsByAcUsersByUs

Required scope: users:write.Idempotency-Key required

Parameters

USstring (US… SID)Required

Request body

displayNamestring (max 128 chars)
mfaRequiredboolean
statusenum
ACTIVELOCKEDDISABLED

PATCH /v1/accounts/{AC}/users/{US}

curl -X PATCH "https://api.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/users/US..." \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21" \
  -H "Idempotency-Key: $(uuidgen)"

Responses

Disable an organization user

DELETE/v1/accounts/{AC}/users/{US}

users.deleteSDK operation deleteV1AccountsByAcUsersByUs

Required scope: users:write.

Parameters

USstring (US… SID)Required

Request body

reasonstring (max 1000 chars)Required

DELETE /v1/accounts/{AC}/users/{US}

curl -X DELETE "https://api.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/users/US..." \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21" \
  -H "Content-Type: application/json" \
  -d '{
  "reason": "string"
}'

Responses

Resend an invited member's invitation e-mail

POST/v1/accounts/{AC}/users/{US}/invitation

users.invitationSDK operation postV1AccountsByAcUsersByUsInvitation

A2-ROLES-07: for a member still INVITED, issues a fresh invitation link (the previous one stops working) and e-mails it. Grants nothing, so no step-up is asked.

Required scope: users:write.Idempotency-Key required

Parameters

USstring (US… SID)Required

POST /v1/accounts/{AC}/users/{US}/invitation

curl -X POST "https://api.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/users/US.../invitation" \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21" \
  -H "Idempotency-Key: $(uuidgen)"

Responses