Authenticate with an Organization Admin User API key, sent in the skyfire-api-key header. Keys belonging to Organization Admins are accepted; a MEMBER key, or any Agent API key, is rejected with 401.

The match is exact and case-insensitive — [email protected] and [email protected] resolve to the same user; substring matching is not supported on this endpoint (use the filter parameter on Get Organization Users for substring search). The email is a path segment, so it must be URL-encoded: ada%40example.com.

Only users in your own organization can be fetched. The organization is derived from the API key. An email that does not exist and an email that belongs to another organization's user return the same 404, so the response never reveals whether an address is registered elsewhere.

Inactive users are returned as well (isActive: false), so admins can inspect them. The user is returned with the agents they own and, for each agent, its accounts. The response body is identical in shape to Get Organization User by ID.