Skip to main content
POST
cURL

Headers

X-CSRF-Token
string
required

Echoes the token from the current session. Required on every unsafe method.

Body

application/json
email
string<email>
required
roles
enum<string>[]
required
Minimum array length: 1
Available options:
owner,
administrator,
support,
finance,
marketing,
auditor

Response

Invitation issued

invitation
object
required

An open invitation. The token is never part of it.

token
string
required

The single-use token. Returned in this response only; the server keeps its SHA-256. The panel builds /admin/invite/<token> from it.