Add a User to Stytch. A user_id is returned in the response that can then be used to perform other operations within Stytch. An email or a phone_number is required.
Create User
POST
https://test.stytch.com/v1/usersBody parameters
email string
The email address of the end user.
phone_number string
The phone number to use for one-time passcodes. The phone number should be in E.164 format (i.e. +1XXXXXXXXXX). You may use +10000000000 to test this endpoint, see Testing for more detail.
name object
The name of the user. Each field in the name object is optional.
first_name string
The first name of the user.
middle_name string
The middle name(s) of the user.
last_name string
The last name of the user.
trusted_metadata object
The trusted_metadata field contains an arbitrary JSON object of application-specific data. See the Metadata reference for complete field behavior details.
untrusted_metadata object
The untrusted_metadata field contains an arbitrary JSON object of application-specific data. Untrusted metadata can be edited by end users directly via the SDK, and cannot be used to store critical information. See the Metadata reference for complete field behavior details.
create_user_as_pending boolean
Flag for whether or not to save a user as pending vs active in Stytch. Defaults to false. If true, users will be saved with status pending in Stytch's backend until authenticated. If false, users will be created as active. An example usage of a true flag would be to require users to verify their phone by entering the OTP code before creating an account for them.
roles array[strings]
Roles to explicitly assign to this User. See the RBAC guide for more information about role assignment.
external_id string
An identifier that can be used in API calls wherever a user_id is expected. This is a string consisting of alphanumeric, ., _, -, or | characters with a maximum length of 128 characters.
Response fields
status_code int
The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
request_id string
Globally unique UUID that is returned with every API call. This value is important to log for debugging purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
user_id string
The unique ID of the affected User.
user object
The user object affected by this API call. See the Get user endpoint for complete response field details.
user_id string
The unique ID of the affected User.
status_code int
The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
request_id string
Globally unique UUID that is returned with every API call. This value is important to log for debugging purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
name object
The name of the User. Each field in the name object is optional.
first_name string
The first name of the user.
middle_name string
The middle name(s) of the user.
last_name string
The last name of the user.
trusted_metadata object
The trusted_metadata field contains an arbitrary JSON object of application-specific data. See the Metadata reference for complete field behavior details.
untrusted_metadata object
The untrusted_metadata field contains an arbitrary JSON object of application-specific data. Untrusted metadata can be edited by end users directly via the SDK, and cannot be used to store critical information. See the Metadata reference for complete field behavior details.
emails array[objects]
An array of email objects for the User.
email_id string
The unique ID of a specific email address.
email string
The email address.
verified boolean
The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
phone_numbers array[objects]
An array of phone number objects linked to the User.
phone_id string
The unique ID for the phone number.
phone_number string
The phone number.
verified boolean
The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
providers array[objects]
An array of OAuth provider objects linked to the User.
oauth_user_registration_id string
The unique ID for an OAuth registration.
provider_subject string
The unique identifier for the User within a given OAuth provider. Also commonly called the "sub" or "Subject field" in OAuth protocols.
provider_type string
Denotes the OAuth identity provider that the user has authenticated with, e.g. Google, Facebook, GitHub etc.
profile_picture_url string
If available, the profile_picture_url is a url of the User's profile picture set in OAuth identity the provider that the User has authenticated with, e.g. Facebook profile picture.
locale string
If available, the locale is the User's locale set in the OAuth identity provider that the user has authenticated with.
webauthn_registrations array[objects]
An array that contains a list of all Passkey or WebAuthn registrations for a given User in the Stytch API.
webauthn_registration_id string
The unique ID for the Passkey or WebAuthn registration.
domain string
The domain on which Passkey or WebAuthn registration was started. This will be the domain of your app.
user_agent string
The user agent of the User.
authenticator_type string
The authenticator_type string displays the requested authenticator type of the Passkey or WebAuthn device. The two valid types are "platform" and "cross-platform". If no value is present, the Passkey or WebAuthn device was created without an authenticator type preference.
verified boolean
The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
name string
The name of the Passkey or WebAuthn registration.
biometric_registrations array[objects]
An array that contains a list of all biometric registrations for a given User in the Stytch API.
biometric_registration_id string
The unique ID for a biometric registration.
verified boolean
The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
totps array[objects]
An array containing a list of all TOTP instances for a given User in the Stytch API.
totp_id string
The unique ID for a TOTP instance.
verified boolean
The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
crypto_wallets array[objects]
An array contains a list of all crypto wallets for a given User in the Stytch API.
crypto_wallet_id string
The unique ID for a crypto wallet
crypto_wallet_address string
The actual blockchain address of the User's crypto wallet.
crypto_wallet_type string
The blockchain that the User's crypto wallet operates on, e.g. Ethereum, Solana, etc.
verified boolean
The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
password object
The password object is returned for users with a password.
password_id string
The unique ID of a specific password
requires_reset boolean
Indicates whether this password requires a password reset
roles array[strings]
Roles assigned to this User. See the RBAC guide for more information about role assignment.
created_at string
The timestamp of the User's creation. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. 2021-12-29T12:33:09Z.
status string
The status of the User. The possible values are pending and active.
email_id string
The unique ID of a specific email address.
phone_id string
The unique ID for the phone number.
status string
The status of the User. The possible values are pending and active.
const stytch = require('stytch');
const client = new stytch.Client({
project_id: 'PROJECT_ID',
secret: 'SECRET',
});
const params = {
email: "sandbox@stytch.com",
external_id: "my-external-id",
};
client.users.create(params)
.then(resp => { console.log(resp) })
.catch(err => { console.log(err) });RESPONSE 201
201
{
"status_code": 201,
"request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
"user_id": "user-test-16d9ba61-97a1-4ba4-9720-b03761dc50c6",
"user": {...},
"email_id": "email-test-81bf03a8-86e1-4d95-bd44-bb3495224953",
"phone_id": "phone-number-test-d5a3b680-e8a3-40c0-b815-ab79986666d0",
"status": "active"
}RESPONSE 400
201
{
"status_code": 400,
"request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
"error_type": "duplicate_email",
"error_message": "A user with the specified email already exists for this project.",
"error_url": "https://stytch.com/docs/api/errors/400"
}RESPONSE 401
201
{
"status_code": 401,
"request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
"error_type": "unauthorized_credentials",
"error_message": "Unauthorized credentials.",
"error_url": "https://stytch.com/docs/api/errors/401"
}RESPONSE 429
201
{
"status_code": 429,
"request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
"error_type": "too_many_requests",
"error_message": "Too many requests have been made.",
"error_url": "https://stytch.com/docs/api/errors/429"
}RESPONSE 500
201
{
"status_code": 500,
"request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
"error_type": "internal_server_error",
"error_message": "Oops, something seems to have gone wrong, please reach out to support@stytch.com to let us know what went wrong.",
"error_url": "https://stytch.com/docs/api/errors/500"
}