---
title: "Invite a member by email"
method: POST
path: "/company/me/invitations"
tags: ["Company"]
---

# Invite a member by email

`POST /company/me/invitations`

## Request

- Base URL: `https://api.atako.ai`
- URL: `https://api.atako.ai/company/me/invitations`
- Auth: HTTP bearer

Company-admin only. 7-day expiry. Emails a direct durable-token link (no Supabase one-time link). The optional `role` (default `member`) and `canCreateAgents` (default `false`, forced `true` for an admin) are applied to the member at acceptance. See docs/concepts/permissions.md.

## Request body

- object
  - `email` string, email, required
  - `role` 'admin' | 'member'
  - `canCreateAgents` boolean

## Response `201`

- CompanyInvitation
  - `id` string, uuid, required
  - `companyId` string, uuid
  - `email` string, email, required
  - `token` string
  - `status` 'pending' | 'accepted' | 'cancelled', required
  - `role` 'admin' | 'member'
  - `canCreateAgents` boolean
  - `invitedBy` string, uuid
  - `expiresAt` string, date-time, required
  - `createdAt` string, date-time, required

## Other responses

- `400`: Validation error.
- `401`: Missing, malformed, or invalid bearer token / API key, or revoked session (SESSION_REVOKED).
- `403`: The caller does not have the required role/permission.
- `404`: No company found
- `409`: ALREADY_MEMBER / ALREADY_INVITED / USER_IN_OTHER_COMPANY

---

[API](https://skmtc.dev/atako/apis/atako-api.md) · [All operations](https://skmtc.dev/atako/apis/atako-api/llms.txt) · [OpenAPI document](https://skmtc.dev/atako/apis/atako-api/revisions/aa555c56fbd7?raw)