> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tai42.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List principals

> Every principal (admin only).



## OpenAPI

````yaml /openapi.json get /api/auth/principals
openapi: 3.1.0
info:
  description: The operator HTTP surface served under /api/*.
  title: tai42-skeleton API
  version: 18.0.1
servers: []
security: []
paths:
  /api/auth/principals:
    get:
      tags:
        - access-control
      summary: List principals
      description: Every principal (admin only).
      operationId: get_api_auth_principals
      responses:
        '200':
          content:
            application/json:
              schema:
                properties:
                  data:
                    $ref: '#/components/schemas/PrincipalListing'
                required:
                  - data
                type: object
          description: Success.
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
          description: Missing or invalid api key.
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
          description: Forbidden.
      security:
        - ApiKeyAuth: []
components:
  schemas:
    PrincipalListing:
      description: Every principal the operator manages.
      items:
        $ref: '#/components/schemas/Principal'
      title: PrincipalListing
      type: array
    Error:
      properties:
        code:
          description: >-
            Stable machine-readable reason a client keys a dedicated error state
            on, present on refusals that opt in (e.g. a 501 not-configured
            refusal). Optional: absent when the error carries only a
            human-readable message.
          type: string
        error:
          type: string
      required:
        - error
      type: object
    Principal:
      additionalProperties: false
      description: >-
        A principal: the unit of identity and authority every credential belongs
        to.


        ``user_id`` is the id the access-control policy row is keyed by.
        ``kind`` is

        ``human`` (authenticates through an accounts provider) or ``service``
        (holds

        keys only, never logs in interactively). ``display_name`` is the
        operator-

        facing label. ``created_by`` is the principal id that created this one,
        or

        ``None`` for the owner the setup door mints. ``disabled`` turns off
        every

        credential the principal owns. ``created_at`` is timezone-aware (UTC).
      properties:
        created_at:
          format: date-time
          title: Created At
          type: string
        created_by:
          anyOf:
            - type: string
            - type: 'null'
          default: null
          title: Created By
        disabled:
          default: false
          title: Disabled
          type: boolean
        display_name:
          title: Display Name
          type: string
        kind:
          enum:
            - human
            - service
          title: Kind
          type: string
        user_id:
          title: User Id
          type: string
      required:
        - user_id
        - kind
        - display_name
        - created_at
      title: Principal
      type: object
  securitySchemes:
    ApiKeyAuth:
      in: header
      name: x-api-key
      type: apiKey

````