How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Soracom User API

- [Access management (Soracom Access Management)](/en/docs/sam/)- Password changes- [Multi-factor authentication](/en/docs/mfa/)- [Switch user](/en/docs/switch-user/) trust policy configuration

Soracom User API is one of 45 APIs that Soracom publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include User. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, a JSON-LD context, and 4 JSON Schemas.

This API exposes 27 operations across 11 paths, and defines 20 schemas. It is described by OpenAPI 3.2.0, at version 20250903-043502.

Requests are made against 2 base URLs: https://api.soracom.io/v1, https://g.api.soracom.io/v1.

27 operations 11 paths 20 schemas 8 DELETE9 GET5 POST5 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
20250903-043502
Base URL
https://api.soracom.io/v1
Authentication
API Key, API Key
Resource Areas
1

Authentication & Security 2

Soracom User API declares 2 security schemes for authenticating requests. An API key is passed in the header as X-Soracom-API-Key (api_key). An API key is passed in the header as X-Soracom-Token (api_token).

  • api_key — API key for authentication. Obtain this from the Soracom User Console or via the Auth API. Required in combination with an API token for all authenticated requ…
  • api_token — API token for authentication. This token has an expiration time and must be refreshed periodically. Required in combination with an API key for all authenticat…

Paths & Operations 27

Across 11 paths, the API surfaces 27 operations — 8 DELETE, 9 GET, 5 POST, 5 PUT. Each is listed below with its method, path, parameters, and response codes.

User 27

- [Access management (Soracom Access Management)](/en/docs/sam/) - Password changes - [Multi-factor authentication](/en/docs/mfa/) - [Switch user](/en/docs/switch-user/) trust pol…

GET
/operators/{operator_id}/users
Retrieve a list of SAM users
listUsers 1 param → 200
DELETE
/operators/{operator_id}/users/{user_name}
Delete User.
deleteUser 2 params → 204404
GET
/operators/{operator_id}/users/{user_name}
Get User.
getUser 2 params → 200
POST
/operators/{operator_id}/users/{user_name}
Create User.
createUser 2 params body → 201400
PUT
/operators/{operator_id}/users/{user_name}
Update User.
updateUser 2 params body → 200404
GET
/operators/{operator_id}/users/{user_name}/auth_keys
List User AuthKeys.
listUserAuthKeys 2 params → 200
POST
/operators/{operator_id}/users/{user_name}/auth_keys
Generate AuthKey.
generateUserAuthKey 2 params → 200
DELETE
/operators/{operator_id}/users/{user_name}/auth_keys/{auth_key_id}
Delete User AuthKey.
deleteUserAuthKey 3 params → 204404
GET
/operators/{operator_id}/users/{user_name}/auth_keys/{auth_key_id}
Get AuthKey.
getUserAuthKey 3 params → 200
DELETE
/operators/{operator_id}/users/{user_name}/mfa
Revoke SAM user's MFA
revokeUserMFA 2 params → 204400
GET
/operators/{operator_id}/users/{user_name}/mfa
Get SAM user's MFA status
getUserMFAStatus 2 params → 200400
POST
/operators/{operator_id}/users/{user_name}/mfa
Enable SAM user's MFA
enableUserMFA 2 params → 200400
POST
/operators/{operator_id}/users/{user_name}/mfa/verify
Verify SAM user's MFA OTP code when MFA activation phase
verifyUserMFA 2 params body → 204400
DELETE
/operators/{operator_id}/users/{user_name}/password
Delete Password.
deleteUserPassword 2 params → 204404
GET
/operators/{operator_id}/users/{user_name}/password
Has User Password.
hasUserPassword 2 params → 200
POST
/operators/{operator_id}/users/{user_name}/password
Create Password.
createUserPassword 2 params body → 201
PUT
/operators/{operator_id}/users/{user_name}/password
Update Password.
updateUserPassword 2 params body → 200
DELETE
/operators/{operator_id}/users/{user_name}/permission
Delete user permission.
deleteUserPermission 2 params → 204400
GET
/operators/{operator_id}/users/{user_name}/permission
Get User Permission.
getUserPermission 2 params → 200
PUT
/operators/{operator_id}/users/{user_name}/permission
Update user permission.
updateUserPermission 2 params body → 200
DELETE
/operators/{operator_id}/users/{user_name}/tokens
Revoke all API keys and API tokens that were generated by the specified SAM user.
revokeUserAuthTokens 2 params → 204400
DELETE
/operators/{operator_id}/users/{user_name}/trust_policy
Deletes user trust policy.
deleteUserTrustPolicy 2 params → 204400
GET
/operators/{operator_id}/users/{user_name}/trust_policy
Gets user trust policy.
getUserTrustPolicy 2 params → 200400
PUT
/operators/{operator_id}/users/{user_name}/trust_policy
Updates user trust policy
updateUserTrustPolicy 2 params body → 204400
DELETE
/operators/{operator_id}/users/default_permissions
Delete the default permissions
deleteDefaultPermissions 1 param → 204403404
GET
/operators/{operator_id}/users/default_permissions
Get the default permissions
getDefaultPermissions 1 param → 200403404
PUT
/operators/{operator_id}/users/default_permissions
Update the default permissions
updateDefaultPermissions 1 param body → 202400403

Schemas 20

The contract defines 20 schemas that model the data the API accepts and returns. The most detailed are UserDetailResponse (8 properties), ListRolesResponse (6 properties), AuthKeyResponse (3 properties), APICallErrorMessage (2 properties). Each schema is shown below with its type and property counts.

GenerateUserAuthKeyResponse
object
2 properties
UpdatePasswordRequest
object
2 properties 2 required
MFAStatusOfUseResponse
object
1 property
AuthKeyResponse
object
3 properties 2 required
UpdateUserRequest
object
1 property
EnableMFAOTPResponse
object
1 property 1 required
GetUserTrustPolicyResponse
object
1 property
UserDetailResponse
object
8 properties 6 required
SetUserTrustPolicyRequest
object
1 property
UpdateDefaultPermissionsRequest
object
1 property 1 required
SetUserPermissionRequest
object
2 properties 1 required
ListRolesResponse
object
6 properties 3 required
CreateUserRequest
object
1 property
GetUserPasswordResponse
object
1 property
GetDefaultPermissionsResponse
object
1 property
GetUserPermissionResponse
object
1 property 1 required
APICallError
object
2 properties
APICallErrorMessage
object
2 properties 2 required
MFAAuthenticationRequest
object
1 property
CreateUserPasswordRequest
object
1 property

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

soracom-user-api-openapi.yml Raw ↑

Other APIs Soracom publishes across the network.

Soracom SIM Management API
Soracom Group Configuration API
Soracom Billing API
Soracom Stats and Diagnostics API
Soracom Auth and Access Management API
Soracom Lagoon API
Soracom Cloud Camera Services API
Soracom Batch API
Soracom Analysis API
Soracom API Sandbox: Coupon API
Soracom API Sandbox: Operator API
Soracom API Sandbox: Order API
Where this information came from

This is an independent, third-party profile of Soracom User API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.