Skip to main content

Workspaces & Invites

Tags: Workspaces, Invites · Version: v1 · Stability: 🟢 Stable

A workspace is the multi-tenant boundary: every template, key, comment, and render belongs to one. Members hold a role — Owner, Editor, or Viewer. Management is JWT-only; the invite preview is public so an invitee can see what they're joining before signing in.

Workspaces​

List my workspaces​

GET /api/workspaces · JWT — every workspace the current user belongs to (with role). Used to populate the workspace switcher. To switch, see POST /api/auth/switch-workspace/{workspaceId}.

List current members​

GET /api/workspaces/current/members · JWT — members of the active workspace (email, role, joined-at).

Members management (Owner-only)​

Invite a member​

POST /api/workspaces/current/invites · JWT (Owner)

Request — InviteMemberBody
{ "email": "teammate@example.com", "role": "Editor" }

Both fields required. Creates an invite with a token. Emails aren't sent automatically yet — share the resulting invite link/token with the invitee.

Change a member's role​

PATCH /api/workspaces/current/members/{userId} · JWT (Owner)

Request — UpdateMemberRoleBody
{ "role": "Viewer" }

{userId} is a UUID. role is required.

Remove a member​

DELETE /api/workspaces/current/members/{userId} · JWT (Owner) — {userId} is a UUID.

Invites​

Preview an invite​

GET /api/invites/{token} · Public

{token} is the opaque invite string. Returns the workspace name, the role offered, the inviter's email, and whether the invite is still redeemable — so the invitee can decide before authenticating.

Accept an invite​

POST /api/invites/{token}/accept · JWT

The invitee must be signed in. On success they join the workspace and receive a new JWT scoped to it — replace the stored token and refetch.