Manage end-user auth records for an app.
Actions:
- "list": Paginated list of app_users (id, email, provider, provider_uid, email_verified,
last_sign_in_at, created_at). Pass the next_cursor from a prior response to page.
- "delete": Hard-delete an app user by id. Cascades to refresh tokens and verification codes.
Use this to unblock OAuth migrations when an existing email/password row collides.
Parameters by action:
list: { app_id, action: "list", limit?, cursor? }
delete: { app_id, action: "delete", user_id }
Tips:
- Looking for a user by email? Call list and filter client-side; this tool does not search by email.
- To switch a user from email/password to Google OAuth without deleting, just have them sign in
with Google — the OAuth callback now links the existing email row in place automatically.