Cowdidocs
API ReferenceOrganization members

Reject an invitation

POST
/v1/user/invitations/organizations/{invitationId}/reject

Reject the caller's own pending organization invitation, matched by their verified email. Requires an authenticated user token; only the invitee may reject. Returns 404 when no pending invitation exists for the caller's email.

Authorization

oauth2
AuthorizationBearer <token>

Create a client with POST /v1/oauth/clients, then exchange its credentials for an access token. AUTHORIZATION_CODE clients act on behalf of a signed-in user and always use PKCE; CLIENT_CREDENTIALS clients act as themselves. A client may only be granted scopes its creator already holds — read the grantable list from GET /v1/oauth/clients/scopes.

In: header

Path Parameters

invitationId*string

Unique identifier of the invitation.

Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/user/invitations/organizations/550e8400-e29b-41d4-a716-446655440004/reject"
{  "id": "550e8400-e29b-41d4-a716-446655440004",  "organization_id": "greenwheels",  "email": "jane@example.com",  "roles": [    "organization-financing-admin"  ],  "status": "PENDING",  "created_at": "2026-03-15T10:00:00Z",  "resource_id": "string"}
{  "code": "BAD_REQUEST",  "description": "Bad Request"}
{  "code": "UNAUTHORISED",  "description": "Unauthorised"}
{  "code": "FORBIDDEN",  "description": "Forbidden"}
{  "id": "550e8400-e29b-41d4-a716-446655440004",  "organization_id": "greenwheels",  "email": "jane@example.com",  "roles": [    "organization-financing-admin"  ],  "status": "PENDING",  "created_at": "2026-03-15T10:00:00Z",  "resource_id": "string"}
{  "code": "RATE_LIMIT_EXCEEDED",  "description": "Too Many Requests"}
{  "code": "INTERNAL_ERROR",  "description": "Internal Server Error"}

Accept an invitation POST

Accept the caller's own pending organization invitation, matched by their verified email. Requires an authenticated user token; only the invitee may accept. Creates the caller's membership in the organization and grants the invited roles, added alongside any role the caller already holds. Returns 404 when no pending invitation exists for the caller's email.

List users GET

List users in the caller's organization with pagination. Filter by status, search text, phone number, tag, or `external_user_id`. Requires the caller's `org:users:read` permission. Results use keyset pagination; follow the `next` or `prev` response link. Returns 200 with an empty `data` array when no user matches the filters.