vaults.inviteMember
Invite a user to an enterprise vault by email.Requires
owner or admin role in the vaultRequest
UUID of the enterprise vault
Email address of the user to invite. Must be a valid email format.
Role to assign. One of:
admin, memberResponse
UUID of the invitation
UUID of the vault
Slug of the vault
Display name of the vault
Vault type (always
enterprise for this endpoint)Vault color
Role the invitee will receive. One of:
admin, memberInvitation status. One of:
pending, accepted, declined, revoked, expiredUser ID of the person who created the invitation
When the invitation expires (14 days from creation)
When the invitation was created
When the invitation was last updated
Example
Validation
- Email addresses are normalized (trimmed, lowercased)
- Cannot invite your own email address (throws
BAD_REQUEST) - Vault must be of type
enterprise(throwsNOT_FOUND) - If a pending invitation already exists, it will be updated with the new role and expiry
- Invitations expire after 14 days
vaults.invitations.listPending
List all pending vault invitations for the authenticated user.Request
No input parameters. Uses authenticated session context.Response
Returns an array of pending invitation objects (same structure asvaults.inviteMember response).
Example
vaults.invitations.acceptInvitation
Accept a pending vault invitation.Request
UUID of the invitation to accept
Response
Always
true on successUUID of the invitation
UUID of the vault
Role assigned. One of:
owner, admin, memberAlways
"accepted"Example
Validation
- Invitation must exist (throws
NOT_FOUND) - Invitation status must be
pending(throwsBAD_REQUEST) - Invitation email must match authenticated user’s email (throws
FORBIDDEN) - Expired invitations are automatically marked as
expiredand rejected (throwsBAD_REQUEST) - Creates or updates vault membership with the invitation’s role
vaults.invitations.declineInvitation
Decline a pending vault invitation.Request
UUID of the invitation to decline
Response
Always
true on successUUID of the invitation
UUID of the vault
Role that was offered. One of:
owner, admin, memberAlways
"declined"Example
Validation
- Invitation must exist (throws
NOT_FOUND) - Invitation status must be
pending(throwsBAD_REQUEST) - Invitation email must match authenticated user’s email (throws
FORBIDDEN) - Expired invitations are automatically marked as
expiredand cannot be declined (throwsBAD_REQUEST) - Does not create a vault membership
Invitation Status Transitions
Invitations follow this lifecycle:Status Details
- pending: Invitation is active and can be accepted or declined
- accepted: User accepted and membership was created/updated
- declined: User declined the invitation
- revoked: Admin cancelled the invitation before acceptance
- expired: Invitation exceeded the 14-day expiry period
Expiration
- Invitations expire 14 days after creation
- Expired invitations are auto-detected when users try to accept/decline
- Status is updated to
expiredwhen expiry is detected