List org service accounts

GET /api/v1/organizations/{id}/service-accounts

Bearer auth

Lists org-scoped customer service accounts. Requires ORG_ADMIN or ORG_MEMBER (read-only).

Path parameters

id string Required

Organization ID

Query parameters

limit integer

Page size (default 50, max 200)
cursor string

Keyset cursor from a previous response's next_cursor

Responses

406

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Unsupported or malformed API version, an operation unavailable in the selected published contract, or an unacceptable representation (including unsupported media-type parameters or excluded SSE). Existing authentication, authorization, and rate-limit failures take precedence.
Hide response attributes Show response attributes object
- badRequestDetail object
  
  Optional validation details defined by the standard error schema; API negotiation errors do not emit this field.
  
  Hide badRequestDetail attribute Show badRequestDetail attribute object
  
  fields array[object]
  
  Fields with validation failures.
  
  Hide fields attributes Show fields attributes object
  
  A field and its validation failure.
  
  description string Required
  
  Human-readable validation failure.
  
  field string Required
  
  Name or path of the invalid request field.
- detail string Required
  
  Human-readable error details.
- error integer Required
  
  HTTP status code.
- errorCode string Required
  
  Machine-readable error code.
- parameters array[string]
  
  Request parameter names associated with the error; omitted when none apply.
- reason string Required
  
  HTTP status reason phrase.
Hide response attributes Show response attributes object
- badRequestDetail object
  
  Optional validation details defined by the standard error schema; API negotiation errors do not emit this field.
  
  Hide badRequestDetail attribute Show badRequestDetail attribute object
  
  fields array[object]
  
  Fields with validation failures.
  
  Hide fields attributes Show fields attributes object
  
  A field and its validation failure.
  
  description string Required
  
  Human-readable validation failure.
  
  field string Required
  
  Name or path of the invalid request field.
- detail string Required
  
  Human-readable error details.
- error integer Required
  
  HTTP status code.
- errorCode string Required
  
  Machine-readable error code.
- parameters array[string]
  
  Request parameter names associated with the error; omitted when none apply.
- reason string Required
  
  HTTP status reason phrase.
200

application/vnd.agent-engine-2026-09-20-preview+json

application/vnd.agent-engine-2026-09-20-preview+json application/json

OK
Hide response attributes Show response attributes object
- caller_ip string
  
  CallerIP is the admin's IP as the gateway sees it (Gin ClientIP / trusted proxy). Omitted when unknown. Piggybacked here so the IP Access List UI can read it from the cached list response (Atlas-style; no dedicated echo API).
- next_cursor string
  
  NextCursor is the keyset cursor for the following page; empty when this page is the last. total always counts the whole scope, ignoring cursor.
- service_accounts array[object]
  
  Hide service_accounts attributes Show service_accounts attributes object
  
  active_secret object
  
  Hide active_secret attributes Show active_secret attributes object
  
  created_at string
  
  expires_at string
  
  last_used_at string
  
  masked_value string
  
  client_id string
  
  created_at string
  
  description string
  
  id string
  
  ip_access_list array[string]
  
  is_active boolean
  
  is_system_managed boolean
  
  name string
  
  org_id string
  
  owner string
  
  project_id string
  
  role_assignments array[object]
  
  Hide role_assignments attributes Show role_assignments attributes object
  
  org_id string
  
  project_id string
  
  role string
  
  type string
  
  updated_at string
- total integer
Hide response attributes Show response attributes object
- caller_ip string
  
  CallerIP is the admin's IP as the gateway sees it (Gin ClientIP / trusted proxy). Omitted when unknown. Piggybacked here so the IP Access List UI can read it from the cached list response (Atlas-style; no dedicated echo API).
- next_cursor string
  
  NextCursor is the keyset cursor for the following page; empty when this page is the last. total always counts the whole scope, ignoring cursor.
- service_accounts array[object]
  
  Hide service_accounts attributes Show service_accounts attributes object
  
  active_secret object
  
  Hide active_secret attributes Show active_secret attributes object
  
  created_at string
  
  expires_at string
  
  last_used_at string
  
  masked_value string
  
  client_id string
  
  created_at string
  
  description string
  
  id string
  
  ip_access_list array[string]
  
  is_active boolean
  
  is_system_managed boolean
  
  name string
  
  org_id string
  
  owner string
  
  project_id string
  
  role_assignments array[object]
  
  Hide role_assignments attributes Show role_assignments attributes object
  
  org_id string
  
  project_id string
  
  role string
  
  type string
  
  updated_at string
- total integer
400

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Bad Request
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
403

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Forbidden
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
404

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Not Found
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
500

application/json

application/json application/vnd.agent-engine-2026-09-20-preview+json

Internal Server Error
Hide response attributes Show response attributes object
- code string
- error string
- success boolean
Hide response attributes Show response attributes object
- code string
- error string
- success boolean

GET /api/v1/organizations/{id}/service-accounts

curl \
 --request GET 'https://agentengine.mongodb.com/api/v1/organizations/{id}/service-accounts' \
 --header "Authorization: $API_KEY"

Response examples (406)

{
  "detail": "This operation is not available in API version 2026-09-20-preview.",
  "error": 406,
  "errorCode": "OPERATION_NOT_IN_API_VERSION",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

{
  "detail": "This operation supports text/event-stream, which the Accept header excludes. Remove unsupported media-type parameters or accept this type with a positive q value.",
  "error": 406,
  "errorCode": "UNACCEPTABLE_MEDIA_TYPE",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

{
  "detail": "The requested API version is not supported. Supported versions: 2026-09-20-preview.",
  "error": 406,
  "errorCode": "UNSUPPORTED_API_VERSION",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

Response examples (406)

{
  "detail": "This operation is not available in API version 2026-09-20-preview.",
  "error": 406,
  "errorCode": "OPERATION_NOT_IN_API_VERSION",
  "parameters": [
    "Accept"
  ],
  "reason": "Not Acceptable"
}

Response examples (200)

{
  "caller_ip": "string",
  "next_cursor": "string",
  "service_accounts": [
    {
      "active_secret": {
        "created_at": "string",
        "expires_at": "string",
        "last_used_at": "string",
        "masked_value": "string"
      },
      "client_id": "string",
      "created_at": "string",
      "description": "string",
      "id": "string",
      "ip_access_list": [
        "string"
      ],
      "is_active": true,
      "is_system_managed": true,
      "name": "string",
      "org_id": "string",
      "owner": "string",
      "project_id": "string",
      "role_assignments": [
        {
          "org_id": "string",
          "project_id": "string",
          "role": "string"
        }
      ],
      "type": "string",
      "updated_at": "string"
    }
  ],
  "total": 42
}

Response examples (200)

{
  "caller_ip": "string",
  "next_cursor": "string",
  "service_accounts": [
    {
      "active_secret": {
        "created_at": "string",
        "expires_at": "string",
        "last_used_at": "string",
        "masked_value": "string"
      },
      "client_id": "string",
      "created_at": "string",
      "description": "string",
      "id": "string",
      "ip_access_list": [
        "string"
      ],
      "is_active": true,
      "is_system_managed": true,
      "name": "string",
      "org_id": "string",
      "owner": "string",
      "project_id": "string",
      "role_assignments": [
        {
          "org_id": "string",
          "project_id": "string",
          "role": "string"
        }
      ],
      "type": "string",
      "updated_at": "string"
    }
  ],
  "total": 42
}

Response examples (400)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (400)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (403)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (403)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (404)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (404)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (500)

{
  "code": "string",
  "error": "string",
  "success": true
}

Response examples (500)

{
  "code": "string",
  "error": "string",
  "success": true
}