> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pinecone.io/llms.txt
> Use this file to discover all available pages before exploring further.
# List service accounts
> List service accounts in the caller's organization. Results are paginated. See query parameters for cursor rules.
Role bindings are not included. Use `GET /admin/role-bindings` with `principal_type` and `principal_id` to list them.
```bash curl theme={null}
PINECONE_ACCESS_TOKEN="YOUR_ACCESS_TOKEN"
curl -X GET "https://api.pinecone.io/admin/service-accounts" \
-H "Authorization: Bearer $PINECONE_ACCESS_TOKEN" \
-H "accept: application/json" \
-H "X-Pinecone-Api-Version: 2026-04"
```
```json curl theme={null}
{
"data": [
{
"id": "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c",
"name": "My Service Account",
"client_id": "l3Ow0CmFyc4jOONcwiKUCRqQKN0tiCAn",
"created_at": "2026-04-10T15:23:00Z",
"updated_at": "2026-04-12T09:11:00Z"
}
],
"pagination": {
"next": "eyJsYXN0X2lkIjoiZDI0MTc3YTAifQ=="
}
}
```
## OpenAPI
````yaml https://raw.githubusercontent.com/pinecone-io/pinecone-api/refs/heads/main/2026-04/admin_2026-04.oas.yaml get /admin/service-accounts
openapi: 3.0.3
info:
title: Pinecone Admin API
description: >
Provides an API for managing a Pinecone organization and its resources,
including projects, API keys, organization users and invites, service
accounts, and role bindings.
contact:
name: Pinecone Support
url: https://support.pinecone.io
email: support@pinecone.io
license:
name: Apache 2.0
url: https://www.apache.org/licenses/LICENSE-2.0
version: 2026-04
servers:
- url: https://api.pinecone.io
description: Production API endpoints
security:
- BearerAuth: []
tags:
- name: API Keys
description: Actions that manage API Keys.
- name: Organizations
description: Actions that manage organizations.
- name: Projects
description: Actions that manage projects.
- name: Users
description: Actions that manage users.
- name: Invites
description: Actions that manage invites.
- name: Service Accounts
description: Actions that manage service accounts.
- name: Role Bindings
description: Actions that manage role bindings.
paths:
/admin/service-accounts:
get:
tags:
- Service Accounts
summary: List service accounts
description: >
List service accounts in the caller's organization. Results are
paginated. See query parameters for cursor rules.
Role bindings are not included. Use `GET /admin/role-bindings` with
`principal_type` and `principal_id` to list them.
operationId: list_service_accounts
parameters:
- in: header
name: X-Pinecone-Api-Version
description: Required date-based version header
required: true
schema:
default: 2026-04
type: string
style: simple
- in: query
name: limit
description: >-
The number of results to return per page. When omitted, the server
defaults to 100. Out-of-range values return `400 OUT_OF_RANGE`.
schema:
default: 100
type: integer
minimum: 1
maximum: 100
style: form
- in: query
name: paginationToken
description: >-
Cursor from `pagination.next` of a prior response. Must be reused
with the same query context (path parameters, filters, and `limit`).
schema:
type: string
style: form
responses:
'200':
description: A paginated list of service accounts.
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceAccountList'
'400':
description: Bad request. The request body included invalid request parameters.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
index-metric-validation-error:
summary: Validation error
value:
error:
code: INVALID_ARGUMENT
message: >-
Bad request. The request body included invalid request
parameters.
status: 400
'401':
description: 'Unauthorized. Possible causes: Invalid API key.'
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
unauthorized:
summary: Unauthorized
value:
error:
code: UNAUTHENTICATED
message: Invalid API key.
status: 401
'403':
description: Forbidden
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
'500':
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
internal-server-error:
summary: Internal server error
value:
error:
code: UNKNOWN
message: Internal server error
status: 500
4XX:
description: Unexpected error on request.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
components:
schemas:
ServiceAccountList:
example:
data:
- client_id: l3Ow0CmFyc4jOONcwiKUCRqQKN0tiCAn
created_at: '2026-04-10T15:23:00.000Z'
id: f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c
name: My Service Account
updated_at: '2026-04-12T09:11:00.000Z'
pagination:
next: eyJsYXN0X2lkIjoiZDI0MTc3YTAifQ==
description: A paginated list of service accounts in the organization.
type: object
properties:
data:
description: The page of service accounts.
type: array
items:
$ref: '#/components/schemas/ServiceAccount'
pagination:
nullable: true
description: >-
Cursor envelope for the next page. `null` (or absent) on the final
page of results.
type: object
allOf:
- example:
next: eyJsYXN0X2lkIjogImluZGV4LTQifQ==
description: >-
Pagination metadata for list responses. When `next` is present,
pass it as `paginationToken` on the following request.
x-component-name: PaginationResponse
type: object
properties:
next:
example: eyJsYXN0X2lkIjogImluZGV4LTQifQ==
description: >-
Opaque cursor for the next page. Do not parse or construct.
Invalid or expired tokens return `400`.
type: string
required:
- data
ErrorResponse:
example:
error:
code: QUOTA_EXCEEDED
message: >-
The index exceeds the project quota of 5 pods by 2 pods. Upgrade
your account or change the project settings to increase the quota.
status: 429
description: The response shape used for all error responses.
type: object
properties:
status:
example: 500
description: The HTTP status code of the error.
type: integer
error:
example:
code: INVALID_ARGUMENT
message: >-
Index name must contain only lowercase alphanumeric characters or
hyphens, and must not begin or end with a hyphen.
description: Detailed information about the error that occurred.
type: object
properties:
code:
description: >-
The error code.
Possible values: `OK`, `UNKNOWN`, `INVALID_ARGUMENT`,
`DEADLINE_EXCEEDED`, `QUOTA_EXCEEDED`, `NOT_FOUND`,
`ALREADY_EXISTS`, `PERMISSION_DENIED`, `UNAUTHENTICATED`,
`RESOURCE_EXHAUSTED`, `FAILED_PRECONDITION`, `ABORTED`,
`OUT_OF_RANGE`, `UNIMPLEMENTED`, `INTERNAL`, `UNAVAILABLE`,
`DATA_LOSS`, `FORBIDDEN`, or `UNPROCESSABLE_ENTITY`.
x-enum:
- OK
- UNKNOWN
- INVALID_ARGUMENT
- DEADLINE_EXCEEDED
- QUOTA_EXCEEDED
- NOT_FOUND
- ALREADY_EXISTS
- PERMISSION_DENIED
- UNAUTHENTICATED
- RESOURCE_EXHAUSTED
- FAILED_PRECONDITION
- ABORTED
- OUT_OF_RANGE
- UNIMPLEMENTED
- INTERNAL
- UNAVAILABLE
- DATA_LOSS
- FORBIDDEN
- UNPROCESSABLE_ENTITY
type: string
message:
example: >-
Index name must contain only lowercase alphanumeric characters
or hyphens, and must not begin or end with a hyphen.
type: string
details:
description: >-
Additional information about the error. This field is not
guaranteed to be present.
type: object
required:
- code
- message
required:
- status
- error
ServiceAccount:
example:
client_id: l3Ow0CmFyc4jOONcwiKUCRqQKN0tiCAn
created_at: '2026-04-10T15:23:00.000Z'
id: f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c
name: My Service Account
updated_at: '2026-04-12T09:11:00.000Z'
description: A service account. The OAuth `client_secret` is not included.
type: object
properties:
id:
description: >-
The unique identifier for the service account. Use this as the path
parameter on `/admin/service-accounts/{service_account_id}`
endpoints and as the `principal_id` when querying or creating role
bindings.
type: string
format: uuid
name:
description: A short human-readable label, set by the caller at creation time.
type: string
minLength: 1
maxLength: 80
client_id:
description: >-
The OAuth client ID used by the service account to obtain access
tokens. Used only for OAuth token exchange.
type: string
created_at:
description: The date and time the service account was created.
type: string
format: date-time
updated_at:
description: >-
The date and time of the service account's most recent metadata
update.
type: string
format: date-time
required:
- id
- name
- client_id
- created_at
- updated_at
securitySchemes:
BearerAuth:
type: http
scheme: bearer
description: >
An [access
token](https://docs.pinecone.io/guides/organizations/manage-service-accounts#retrieve-an-access-token)
must be provided in the `Authorization` header using the `Bearer`
scheme.
````