Skip to content
localisyncDocs
Open panel

Create and send an invitation

Requires current Owner/Admin membership and an active workspace.

POST /api/v1/workspaces/{id}/invitations

Operation: createInvitation · Download OpenAPI

Requires an authenticated Localisync panel session. The API checks current membership and permissions for workspace operations. See authentication and request rules.

sessionCookie

{
"type": "apiKey",
"in": "cookie",
"name": "__Host-localisync-session"
}
Name Location Required Description
id path Yes See constraints below.
X-CSRF-Token header Yes See constraints below.
Origin header Yes See constraints below.
Idempotency-Key header Yes See constraints below.
{
"type": "string",
"format": "uuid"
}
{
"type": "string"
}
{
"type": "string",
"format": "uri"
}
{
"type": "string",
"format": "uuid"
}

Required: Yes.

Field Type Required Constraints / description
version integer Yes minimum: 1
email string Yes format: "email"; maxLength: 254
role Admin, Editor, Viewer Yes —
{
"type": "object",
"properties": {
"version": {
"type": "integer",
"minimum": 1
},
"email": {
"type": "string",
"format": "email",
"maxLength": 254
},
"role": {
"type": "string",
"enum": [
"Admin",
"Editor",
"Viewer"
]
}
},
"required": [
"version",
"email",
"role"
],
"additionalProperties": false
}

Completed. For invitation creation/resend, inspect delivery; accepted means SMTP accepted the message.

Content type: application/json Schema reference: Invitation.

Field Type Required Constraints / description
id string Yes format: "uuid"
workspaceId string Yes format: "uuid"
workspaceName string Yes —
email string Yes format: "email"
role Admin, Editor, Viewer Yes —
inviterId string Yes format: "uuid"
recipientId string or null Yes format: "uuid"
status pending, accepted, declined, revoked, expired Yes —
delivery preparing, accepted, unconfirmed Yes —
expiresAt string Yes format: "date-time"
createdAt string Yes format: "date-time"
{
"$ref": "#/components/schemas/Invitation"
}

Invalid request fields, identifier, pagination or idempotency key.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

An authenticated, verified customer session is required.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

The current member lacks permission or CSRF/Origin validation failed.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

The resource is missing or not visible to the current customer.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

Stale version, conflicting idempotency key or unavailable invitation/workspace state.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

Request or invitation send limit reached. Respect Retry-After in seconds; route limits return the remaining window, invitation limits return 60.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

A required database, identity or email service is unavailable; no successful send is claimed.

Content type: application/json Schema reference: Error.

Field Type Required Constraints / description
error string Yes —
message string Yes —
requestId string No —
{
"$ref": "#/components/schemas/Error"
}

Request errors and safe retries · Troubleshooting

Cookie preferences

Your choice applies to localisync.com and docs.localisync.com. You can change it at any time using Cookie settings.