Returns the organizations you can see, newest first.

GET /v1/iam/organizations

Returns the organizations you can see, newest first. Narrow it to one parent account, and set a limit and offset to page through the rest.

READING THE REGISTRY IS AN OPERATOR ACT, and the handler now says so itself.

It never did: the scope lived only in the Guard, which refuses a non-operator GET with 403 before the handler runs. That was true and sufficient for as long as HTTP was the only way in. It stopped being sufficient when the same typed op became reachable over the agent door, where a request arrives at the handler with no middleware in front of it. A handler that reads no principal and treats an absent Owner selector as no filter would answer such a caller with the whole registry, so the scope has to be the handler's own, not the door's.

So the fact moves to where every door reaches it. The Guard keeps its own refusal — two checks of one rule is not two rules, and the outer one still spends nothing to refuse — but the rule no longer depends on which door was used. A caller who wants the organizations they can ACT in asks Search, which answers everyone from their own memberships.

Request

3 fields.

Response

200 body — 76 fields.

Failure carries the platform error shape — see Errors.

Examples

hanzo iam organizations get

import { Configuration, IamApi } from 'hanzoai';

const api = new IamApi(new Configuration({ accessToken: process.env.HANZO_API_KEY }));
const { data } = await api.listOrganizations();

from hanzoai.cloud import ApiClient, Configuration
from hanzoai.cloud.api import IamApi

client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"]))
result = IamApi(client).list_organizations()

cfg := cloud.NewConfiguration()
cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY"))
client := cloud.NewAPIClient(cfg)

resp, _, err := client.IamAPI.ListOrganizations(context.Background()).Execute()
if err != nil {
	return err
}

use hanzo_cloud::apis::{configuration::Configuration, iam_api};

let mut cfg = Configuration::new();
cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok();

let result = iam_api::list_organizations(&cfg, Default::default()).await?;

import ai.hanzo.cloud.ApiClient;
import ai.hanzo.cloud.api.IamApi;

ApiClient client = new ApiClient();
client.setRequestInterceptor(b -> b.header("Authorization", "Bearer " + System.getenv("HANZO_API_KEY")));

var result = new IamApi(client).listOrganizations();

curl https://api.hanzo.ai/v1/iam/organizations \
  -H "Authorization: Bearer $HANZO_API_KEY"

curl -X POST https://api.hanzo.ai/v1/mcp \
  -H "Authorization: Bearer $HANZO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
       "jsonrpc": "2.0",
       "id": 1,
       "method": "tools/call",
       "params": {
         "name": "iam",
         "arguments": {
           "op": "listOrganizations",
           "input": {}
         }
       }
     }'

IAM API · All Hanzo APIs · Interactive reference