Skip to content

Get a service account

Settings module

GET/service-accounts/{id}serviceAccounts.get

A non-human member with its own audit identity. Returns one service account with its `ETag`. A service account the caller may not see returns 404.

  • Requires the capability org.settings.read.
  • OAuth scopes: org.
  • Error statuses: 400, 401, 404, 429. Errors are RFC 9457 problem details.

Path and query parameters

serviceAccounts.get: Path and query parameters
FieldTypeRequiredDescription
idstring (uuid)YesIdentifier of the service account.
fieldsFieldsNoSparse fieldset: a comma-separated list of top-level fields to return. `id` is always returned.Constraints: pattern ^[a-z_][a-z0-9_]*(,[a-z_][a-z0-9_]*)*$

Response 200: ServiceAccount

serviceAccounts.get: ServiceAccount
FieldTypeRequiredDescription
idstring (uuid)YesIdentifier of the service account.
org_idstring (uuid)YesIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)YesWhen the row was created.
created_bystring (uuid) | nullYesIdentifier of the person who created the row; null when a seed, platform or system process created it.
updated_atstring (date-time)YesWhen the row was last updated.
updated_bystring (uuid) | nullYesIdentifier of the person who last updated the row; null when a seed, platform or system process updated it.
namestringYesService account name.Constraints: length 1 to 300
owner_person_idstring (uuid)YesIdentifier of the owner.
expires_atstring (date-time) | nullYesExpiry.
user_idstring (uuid)YesIdentifier of the sign-in of the service account, which never signs in interactively.
person_idstring (uuid)YesIdentifier of the person row of the service account, the actor in audit columns.
membership_idstring (uuid)YesIdentifier of the membership that carries the service account's role in the org.
{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "name": "Ledger Export Bot",
  "owner_person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "expires_at": "2026-10-08T14:30:00Z",
  "user_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "membership_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"
}

Code samples

curl -X GET "$XOS_BASE_URL/service-accounts/0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f" \
  -H "Authorization: Bearer $XOS_API_KEY"
const { data, etag } = await xos.serviceAccounts.get("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f");
response = xos.service_accounts.get("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f")
xos service-accounts get 0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f