Skip to content
SupaCloud Docs
Select themeSelect language

`GET /api/organization/members/board` — one server-paginated, filtered + sorted page of the org-members board plus the total + the facet chips.

GET
/api/organization/members/board
curl --request GET \
  --url https://example.com/api/organization/members/board \
  --cookie supacloud_session=<supacloud_session>

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Query Parameters

Section titled “Query Parameters”
q
string

Free-text search over the member display name + email.

role
string

role filter chip (owner | admin | billing_admin | member).

status
string

status filter chip (active | suspended).

seat
string

seat filter chip — a seat_types.id. A member with no seat is never matched; an unparseable value is ignored (= every seat).

sort
string

Whitelisted sort column: joined_at | name | email | role | status | seat. Default joined_at.

dir
string

asc | desc (default desc).

limit
integer format: int64
offset
integer format: int64
include_facets
boolean

Recompute the facet chips (default true). The board sends false on a page/sort change since the chip counts are org-wide.

Responses

Section titled “Responses”

200

Section titled “200”

One page of org members.

Media typeapplication/json

GET /api/organization/members/board body — one page of members + total + facet chips.

object
facets
One of:
null
items
required
Array<object>

An organization member enriched with the user’s display name + email (ADR 0035 / #284 — G1), so the members UI shows people, not raw UUIDs. display_name/email are LEFT-joined and therefore optional.

object
display_name
string | null
email
string | null
id
required
string format: uuid
invited_by
string | null format: uuid
joined_at
required
string format: date-time
organization_id
required
string format: uuid
role
required
string
seat_type_id
string | null format: uuid
status
required
string
user_id
required
string format: uuid
total
required
integer format: int64
Examplegenerated
{
  "facets": {
    "active": 1,
    "by_role": [
      {
        "count": 1,
        "value": "example"
      }
    ],
    "by_seat": [
      {
        "count": 1,
        "value": "example"
      }
    ],
    "suspended": 1
  },
  "items": [
    {
      "display_name": "example",
      "email": "example",
      "id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
      "invited_by": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
      "joined_at": "2026-04-15T12:00:00Z",
      "organization_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
      "role": "example",
      "seat_type_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
      "status": "example",
      "user_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
    }
  ],
  "total": 1
}

400

Section titled “400”

Structured client error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
  "code": "not_found"
}

401

Section titled “401”

Authentication required

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
  "code": "not_found"
}

403

Section titled “403”

Permission denied

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
  "code": "not_found"
}

500

Section titled “500”

Structured server error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
  "code": "not_found"
}