---
title: "Public Invite"
method: GET
path: "/api/v1/quick-spaces/public/invites/{token}"
tags: ["quickSpaces", "quickSpaces"]
---

# Public Invite

`GET /api/v1/quick-spaces/public/invites/{token}`

Unauthenticated BY DESIGN — this is what the invite landing page reads before the invitee
has any session at all, and requiring a JWT here is exactly the bug it fixes (the app bounced
a session-less invitee to /logout).

Gated by the signed token from the invite email and nothing else; it returns only the fields on
PublicInviteResponseDTO (workspace name, inviter's display name, the role, their own address)
and 404s identically for every failure. Rate-limited per IP on top of the token's
unguessability so it can't be hammered.

## Path parameters

- `token` string, required

## Response `200`

Successful Response

- PublicInviteResponseDTO — What the UNAUTHENTICATED invite landing page is allowed to know. Every field here is something the invitee was already told by the invite email that gave them the token, or is their own address — so the page can say what they're joining without the endpoint becoming a peephole into the workspace. Deliberately absent: the member roster, the project/brand list, the inviter's email, seat counts, anything about the account or its plan.
  - `workspace_id` string, required
  - `workspace_name` string, required
  - `inviter_name` string, required
  - `role` string, required
  - `email` string, required
  - `status` string, required
  - `continue_url` string, required
  - `auth_mode` string

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/brandbooster/apis/fastapi.md) · [All operations](https://skmtc.dev/brandbooster/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/brandbooster/fastapi/revisions/624917d53409/schema)