A valid request URL is required to generate request examples{
"customer": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "<string>",
"role": "owner",
"role_name": "Owner",
"permissions": [
"$team.manage",
"$billing.manage",
"$keys.manage"
],
"joined_at": "2023-11-07T05:31:56Z",
"created_at": "2023-11-07T05:31:56Z"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}Accept an invitation
Takes two proofs, not one. The token proves the invitation — that this seat was offered to this address. The contact session proves the person. So the invited address must be an identity of the signed-in contact: a forwarded link seats nobody (invitation_not_yours).
An email becomes an identity when something makes it one — your own server calling POST /v1/contacts with it, or a magic link or six-digit code that proved it. Passing an address to /v1/boot deliberately does not.
An invitation belongs to one environment. A contact of the other one is refused with the same invalid_token as an expired link.
A valid request URL is required to generate request examples{
"customer": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "<string>",
"role": "owner",
"role_name": "Owner",
"permissions": [
"$team.manage",
"$billing.manage",
"$keys.manage"
],
"joined_at": "2023-11-07T05:31:56Z",
"created_at": "2023-11-07T05:31:56Z"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}Autorizações
A contact session token, uk_ct_…. Belongs to one of the developer's own users, and reads only that user's data.
Corpo
The uk_cin_… token from the email.
Resposta
Joined.
A customer, as the contact who belongs to it sees it.
Show child attributes
Show child attributes