Cowdidocs
API ReferenceMerchant members

List the caller's invitations

GET
/v1/user/invitations/merchants

List the caller's own pending merchant invitations, matched by their email. Requires an authenticated user token. Returns an empty list when the caller has no pending invitation.

Authorization

oauth2
AuthorizationBearer <token>

Create a client with POST /v1/oauth/clients, then exchange its credentials for an access token. AUTHORIZATION_CODE clients act on behalf of a signed-in user and always use PKCE; CLIENT_CREDENTIALS clients act as themselves. A client may only be granted scopes its creator already holds — read the grantable list from GET /v1/oauth/clients/scopes.

In: header

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/user/invitations/merchants"
[  {    "id": "550e8400-e29b-41d4-a716-446655440002",    "merchant_id": "550e8400-e29b-41d4-a716-446655440001",    "organization_id": "greenwheels",    "email": "jane@example.com",    "role": "merchant-financing-admin",    "status": "PENDING",    "created_at": "2026-03-15T10:00:00Z",    "resource_id": "string"  }]
{  "code": "BAD_REQUEST",  "description": "Bad Request"}
{  "code": "UNAUTHORISED",  "description": "Unauthorised"}
{  "code": "FORBIDDEN",  "description": "Forbidden"}
{  "code": "RATE_LIMIT_EXCEEDED",  "description": "Too Many Requests"}
{  "code": "INTERNAL_ERROR",  "description": "Internal Server Error"}

Delete a merchant member through an organization DELETE

Deprecated. Use `DELETE /v1/merchants/{id}/members/{userId}`. Requires `merchant:members:write` on the merchant. The organization must match the caller and the merchant.

Accept an invitation POST

Accept the caller's own pending merchant invitation, matched by their email. Requires an authenticated user token; only the invitee may accept. Activates the caller's merchant membership with the invited role and activates the merchant. Returns 404 when no pending invitation exists for the caller's email.