API reference
Organizations
Every path is relative to https://api.palloo.app/v1.
Send a bot token as Authorization: Bearer palloo_bot_... unless the operation says otherwise; see Authentication.
Try it
Send real requests to https://api.palloo.app/v1 from this page. Open Try it under an operation, fill in its fields and send it.
A bot token is a password.
Anyone who has it can act as your bot. Use a test bot in a test server, never a production bot. The token stays in this tab's memory only: it is not saved, and it goes to the API and nowhere else. Reloading or leaving the page forgets it.
Starts with palloo_bot_. People's tokens are refused here.
On this page
Get organization
/organizations/{id}
Bot token: Call it with a bot token (people can call it too).
An organization. Anyone sees verified ones with their active members, leaving out members who hide the verified_organization badge (they still see themselves); its own members and instance admins see it in any state, and the owner and admins also see invitations and every member.
Try it: GET /organizations/{id}
Sends the bot token from the top of this page.
Request
GET https://api.palloo.app/v1/organizations/{id}
curl command
Response
Parameters
| Name | In | Type | Description |
|---|---|---|---|
| id Required | path | string |
Organization ID. |
Responses
- 200
-
The organization.
Body: Organization
Example response (200) { "id": "01J9ZQ3V5K8M2N4P6R8T0W2Y4A", "name": "string", "description": "string", "owner_id": "01J9ZQ3V5K8M2N4P6R8T0W2Y4A", "owner_username": "string", "domain": "string", "domain_id": "string", "status": "pending", "verified": false, "submitted_at": "2026-10-15T09:00:00Z", "reviewed_at": "2026-10-15T09:00:00Z", "decision_reason": "string", "communities": [ { "id": "01J9ZQ3V5K8M2N4P6R8T0W2Y4A", "name": "string" } ], "members": [ { "user": { "id": {}, "username": "string", "display_name": "string", "kind": {}, "avatar": {}, "avatar_dark": {} }, "state": "invited", "invited_at": "2026-10-15T09:00:00Z", "joined_at": "2026-10-15T09:00:00Z" } ], "my_state": "invited" } - 401
-
unauthenticated: the bearer token is missing, invalid or expired.Body: Error
WWW-Authenticateheader. - 404
-
organization_not_found.Body: Error
- 429
-
rate_limited: too many attempts. Every operation a bot calls is also limited per bot (50 at once, then 50 per second), so any authenticated operation can answer this to a bot. Changes to a community's structure (creating or changing the community, channels, roles, member roles, overwrites, invites, kicks, bans, timeouts, report updates and actions, and bots) are also limited per caller (30 at once, then 1 per second) and per community (60 at once, then 1 per second), and creating communities per caller (10 at once, then 1 every 5 minutes).Body: Error
Retry-Afterheader. - 500
-
internal: an unexpected server error. Details are only in server logs.Body: Error