Skip to main content

GET (/users//people/)

Gets a person by target ID from caller’s people collection. The domain for these URIs is social.xboxlive.com.

Remarks

GET operations won’t modify any resources so this will produce the same results if executed once or multiple times.

URI parameters

Authorization

| Type| Required| Description| Response if missing| | --- | --- | --- | --- | --- | --- | --- | | XUID| yes| Caller has user’s XBOX User ID (XUID).| 401 Unauthorized|

Required Request Headers

| Header| Description| | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authorization| String. Authorization data for XBOX LIVE. This is typically an encrypted XSTS token. Example value: XBL3.0 x=<userhash>;<token>.|

Optional Request Headers

| Header| Description| | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | X-RequestedServiceVersion| Build name/number of the XBOX LIVE service to which this request should be directed. The request will only be routed to that service after verifying the validity of the header, the claims in the auth token, etc. Default value: 1.| | Accept| String. Content-Types that the caller accepts in the response. All responses are application/json.|

Request body

No objects are sent in the body of this request.

HTTP status codes

The service returns one of the status codes in this section in response to a request made with this method on this resource. For a complete list of standard HTTP status codes used with XBOX Live Services, see Standard HTTP status codes. | Code| Reason phrase| Description| | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | 200| OK| Success.| | 400| Bad Request| User IDs were malformed.| | 403| Forbidden| XUID claim could not be parsed from the authorization header.| | 404| Not Found| Target user was not found in the owner’s People list.|

Required Response Headers

| Header| Type| Description| | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Content-Length| 32-bit unsigned integer| Length, in bytes, of the response body. Example value: 22.| | Content-Type| string| MIME type of the response body. This will always be application/json.|

Response body

If the call is successful, the service returns the target person. See Person (JSON).

Sample response

See also

Parent
/users//people/
Last modified on August 20, 2026