NetBox Users API is one of 14 APIs that NetBox publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include User. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.
This API exposes
56 operations
across 14 paths,
and defines 32 schemas.
It is described by OpenAPI 3.2.0, at version 4.5.9 (4.5).
Requests are made against the base URL https://demo.netbox.dev/api.
56 operations14 paths32 schemas12 DELETE13 GET12 PATCH7 POST12 PUT
Metadata
The identity and technical contract details declared by the specification.
Specification
OpenAPI 3.2.0
API Version
4.5.9 (4.5)
Base URL
https://demo.netbox.dev/api
Authentication
API Key, API Key
License
Apache v2 License
Resource Areas
1
Authentication & Security 2
NetBox Users API declares
2 security schemes
for authenticating requests.
An API key is passed in the cookie as sessionid (cookieAuth).
An API key is passed in the header as Authorization (tokenAuth).
tokenAuth — Token (v1) or Bearer . (v2)
Paths & Operations 56
Across 14 paths, the API surfaces 56 operations — 12 DELETE, 13 GET, 12 PATCH, 7 POST, 12 PUT. Each is listed below with its method, path, parameters, and response codes.
Users 56
GET
/api/users/config/
Users config retrieve
users_config_retrieve→ 200
GET
/api/users/groups/
Users groups list
users_groups_list47 params→ 200
POST
/api/users/groups/
Users groups create
users_groups_createbody→ 201
PUT
/api/users/groups/
Users groups bulk update
users_groups_bulk_updatebody→ 200
PATCH
/api/users/groups/
Users groups bulk partial update
users_groups_bulk_partial_updatebody→ 200
DELETE
/api/users/groups/
Users groups bulk destroy
users_groups_bulk_destroybody→ 204
GET
/api/users/groups/{id}/
Users groups retrieve
users_groups_retrieve1 param→ 200
PUT
/api/users/groups/{id}/
Users groups update
users_groups_update1 parambody→ 200
PATCH
/api/users/groups/{id}/
Users groups partial update
users_groups_partial_update1 parambody→ 200
DELETE
/api/users/groups/{id}/
Users groups destroy
users_groups_destroy1 param→ 204
GET
/api/users/owner-groups/
Users owner groups list
users_owner_groups_list37 params→ 200
POST
/api/users/owner-groups/
Users owner groups create
users_owner_groups_createbody→ 201
PUT
/api/users/owner-groups/
Users owner groups bulk update
users_owner_groups_bulk_updatebody→ 200
PATCH
/api/users/owner-groups/
Users owner groups bulk partial update
users_owner_groups_bulk_partial_updatebody→ 200
DELETE
/api/users/owner-groups/
Users owner groups bulk destroy
users_owner_groups_bulk_destroybody→ 204
GET
/api/users/owner-groups/{id}/
Users owner groups retrieve
users_owner_groups_retrieve1 param→ 200
PUT
/api/users/owner-groups/{id}/
Users owner groups update
users_owner_groups_update1 parambody→ 200
PATCH
/api/users/owner-groups/{id}/
Users owner groups partial update
users_owner_groups_partial_update1 parambody→ 200
DELETE
/api/users/owner-groups/{id}/
Users owner groups destroy
users_owner_groups_destroy1 param→ 204
GET
/api/users/owners/
Users owners list
users_owners_list49 params→ 200
POST
/api/users/owners/
Users owners create
users_owners_createbody→ 201
PUT
/api/users/owners/
Users owners bulk update
users_owners_bulk_updatebody→ 200
PATCH
/api/users/owners/
Users owners bulk partial update
users_owners_bulk_partial_updatebody→ 200
DELETE
/api/users/owners/
Users owners bulk destroy
users_owners_bulk_destroybody→ 204
GET
/api/users/owners/{id}/
Users owners retrieve
users_owners_retrieve1 param→ 200
PUT
/api/users/owners/{id}/
Users owners update
users_owners_update1 parambody→ 200
PATCH
/api/users/owners/{id}/
Users owners partial update
users_owners_partial_update1 parambody→ 200
DELETE
/api/users/owners/{id}/
Users owners destroy
users_owners_destroy1 param→ 204
GET
/api/users/permissions/
Users permissions list
users_permissions_list66 params→ 200
POST
/api/users/permissions/
Users permissions create
users_permissions_createbody→ 201
PUT
/api/users/permissions/
Users permissions bulk update
users_permissions_bulk_updatebody→ 200
PATCH
/api/users/permissions/
Users permissions bulk partial update
users_permissions_bulk_partial_updatebody→ 200
DELETE
/api/users/permissions/
Users permissions bulk destroy
users_permissions_bulk_destroybody→ 204
GET
/api/users/permissions/{id}/
Users permissions retrieve
users_permissions_retrieve1 param→ 200
PUT
/api/users/permissions/{id}/
Users permissions update
users_permissions_update1 parambody→ 200
PATCH
/api/users/permissions/{id}/
Users permissions partial update
users_permissions_partial_update1 parambody→ 200
DELETE
/api/users/permissions/{id}/
Users permissions destroy
users_permissions_destroy1 param→ 204
GET
/api/users/tokens/
Users tokens list
users_tokens_list71 params→ 200
POST
/api/users/tokens/
Users tokens create
users_tokens_createbody→ 201
PUT
/api/users/tokens/
Users tokens bulk update
users_tokens_bulk_updatebody→ 200
PATCH
/api/users/tokens/
Users tokens bulk partial update
users_tokens_bulk_partial_updatebody→ 200
DELETE
/api/users/tokens/
Users tokens bulk destroy
users_tokens_bulk_destroybody→ 204
GET
/api/users/tokens/{id}/
Users tokens retrieve
users_tokens_retrieve1 param→ 200
PUT
/api/users/tokens/{id}/
Users tokens update
users_tokens_update1 parambody→ 200
PATCH
/api/users/tokens/{id}/
Users tokens partial update
users_tokens_partial_update1 parambody→ 200
DELETE
/api/users/tokens/{id}/
Users tokens destroy
users_tokens_destroy1 param→ 204
POST
/api/users/tokens/provision/
Users tokens provision create
users_tokens_provision_createbody→ 201401
GET
/api/users/users/
Users users list
users_users_list91 params→ 200
POST
/api/users/users/
Users users create
users_users_createbody→ 201
PUT
/api/users/users/
Users users bulk update
users_users_bulk_updatebody→ 200
PATCH
/api/users/users/
Users users bulk partial update
users_users_bulk_partial_updatebody→ 200
DELETE
/api/users/users/
Users users bulk destroy
users_users_bulk_destroybody→ 204
GET
/api/users/users/{id}/
Users users retrieve
users_users_retrieve1 param→ 200
PUT
/api/users/users/{id}/
Users users update
users_users_update1 parambody→ 200
PATCH
/api/users/users/{id}/
Users users partial update
users_users_partial_update1 parambody→ 200
DELETE
/api/users/users/{id}/
Users users destroy
users_users_destroy1 param→ 204
Schemas 32
The contract defines 32 schemas that model the data the API accepts and returns. The most detailed are Token (15 properties), TokenProvision (14 properties), User (13 properties), ObjectPermission (12 properties). Each schema is shown below with its type and property counts.
BriefUserRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
1 property1 required
PatchedTokenRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
9 properties
GroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
3 properties1 required
PaginatedObjectPermissionList
object
4 properties2 required
BriefOwnerGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
2 properties1 required
PatchedObjectPermissionRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties
OwnerGroup
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
7 properties6 required
PaginatedOwnerList
object
4 properties2 required
ObjectPermission
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
12 properties7 required
OwnerGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
2 properties1 required
Group
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties6 required
BriefUser
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
4 properties4 required
PaginatedUserList
object
4 properties2 required
PaginatedOwnerGroupList
object
4 properties2 required
NestedGroup
object
Represents an object related through a ForeignKey field. On write, it accepts a primary key (PK) value or a dictionary of attributes which can be used to uniqu…
5 properties5 required
TokenRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
9 properties1 required
UserRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
10 properties2 required
PatchedGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
3 properties
OwnerRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
5 properties2 required
TokenProvision
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
14 properties8 required
TokenProvisionRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties2 required
User
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
13 properties5 required
PatchedOwnerGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
2 properties
NestedUser
object
Represents an object related through a ForeignKey field. On write, it accepts a primary key (PK) value or a dictionary of attributes which can be used to uniqu…
5 properties5 required
PatchedOwnerRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
5 properties
PaginatedGroupList
object
4 properties2 required
Token
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
15 properties7 required
PaginatedTokenList
object
4 properties2 required
ObjectPermissionRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties3 required
Owner
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
9 properties6 required
PatchedUserRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
10 properties
BriefOwnerGroup
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
5 properties4 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of NetBox Users API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.