Invite somebody

The invitation exists immediately and the email sends itself; path is the invite link’s path on the dashboard, for sharing by hand. Token-only: a key acts for the organization with nobody behind it, and inviting somebody in is a person’s decision. Only an owner’s own token can grant owner.

POST/invites

Authorization

AuthorizationBearer token · headerrequired

`MEDIAN_KEY` from Settings under API, or an MCP OAuth access token. A key acts as the organization; a token acts as the person who approved it.

Request body

requiredapplication/json

emailstringrequired

rolestringrequired

Allowed:owneradminmember

Responses

200The invitation and its link.

idstring

pathstring

400The request is malformed, and the message names the field.

errorobject

Show properties

codestring

messagestring

401The bearer token is missing, revoked, or expired.

errorobject

Show properties

codestring

messagestring

403The token's person does not hold the role this needs.

errorobject

Show properties

codestring

messagestring

409It already exists, or it was already settled.

errorobject

Show properties

codestring

messagestring

429Too many requests. Wait the seconds in `Retry-After`. Limits depend on the plan. See [rate limits](/api/errors-and-limits#rate-limits).

errorobject

Show properties

codestring

messagestring

Request

curl -X POST "https://api.median.sh/v1/invites" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "casey@example.com",
  "role": "member"
}'

const response = await fetch("https://api.median.sh/v1/invites", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
  "email": "casey@example.com",
  "role": "member"
})
});

Response

{
  "id": "string",
  "path": "string"
}