Skip to main content

Public — Invitations

Recipient-facing network invitation accept (magic-link token)

Accept the invitation (after code verification); the invitee is enrolled as a member

Public, token-authenticated final step that accepts the invitation and enrolls the recipient as an active network member in the invited role. It resolves the invitee to a user record by the invited email (creating one if none exists) and keys the membership to it. Requires that the emailed code has already been verified, otherwise returns 409. The operation is idempotent for concurrent or repeated accepts and emits an invitation.accepted webhook to the network.

Email a verification code to the invited address

Public, token-authenticated action that generates a numeric verification code and emails it to the invited address, proving the recipient controls that mailbox; it must be submitted to verify-code before the invitation can be accepted. The email send is best-effort — the code is stored even if delivery fails. Keyless callers are rate limited per token and per client IP; exceeding the limit returns 429 with a Retry-After hint. A valid API key for the network bypasses the rate limit.