List the caller's invitations
List the caller's own pending organization invitations, matched by their verified email. Requires an authenticated user token. Returns an empty list when the caller has no pending invitation.
Authorization
oauth2 Create a client with POST /v1/oauth/clients, then exchange its credentials for an access token. AUTHORIZATION_CODE clients act on behalf of a signed-in user and always use PKCE; CLIENT_CREDENTIALS clients act as themselves. A client may only be granted scopes its creator already holds — read the grantable list from GET /v1/oauth/clients/scopes.
In: header
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/v1/user/invitations/organizations"[ { "id": "550e8400-e29b-41d4-a716-446655440004", "organization_id": "greenwheels", "email": "jane@example.com", "roles": [ "organization-financing-admin" ], "status": "PENDING", "created_at": "2026-03-15T10:00:00Z", "resource_id": "string" }]{ "code": "BAD_REQUEST", "description": "Bad Request"}{ "code": "UNAUTHORISED", "description": "Unauthorised"}{ "code": "FORBIDDEN", "description": "Forbidden"}{ "code": "RATE_LIMIT_EXCEEDED", "description": "Too Many Requests"}{ "code": "INTERNAL_ERROR", "description": "Internal Server Error"}Revoke an invitation DELETE
Cancel the organization's pending member invitation. Requires the caller's `org:members:write` permission on the organization. Idempotent: returns 204 even when the invitation does not exist or is no longer pending.
Accept an invitation POST
Accept the caller's own pending organization invitation, matched by their verified email. Requires an authenticated user token; only the invitee may accept. Creates the caller's membership in the organization and grants the invited roles, added alongside any role the caller already holds. Returns 404 when no pending invitation exists for the caller's email.