---
title: "Revoke a pending WorkOS invitation."
method: DELETE
path: "/v1/orgs/{orgId}/invites/{invitationId}"
tags: ["members"]
---

# Revoke a pending WorkOS invitation.

`DELETE /v1/orgs/{orgId}/invites/{invitationId}`

## Request

- Base URL: `http://localhost:8080`
- URL: `http://localhost:8080/v1/orgs/{orgId}/invites/{invitationId}`
- Auth: one of:
  - API key in cookie `dvt_session`
  - HTTP bearer

Revokes the invitation through WorkOS. Admin or owner only.

The invitation is looked up first so its organization can be checked against
the caller's own org: an invitation id that resolves to a DIFFERENT
organization 404s identically to a nonexistent id — this endpoint never
reveals that another org's invitation exists. Unavailable in dev mode (503; no
hosted identity provider configured).

## Response `204`

Invitation revoked.

## Other responses

- `400`: Malformed request.
- `401`: Missing, invalid, or expired session.
- `403`: The caller's role does not permit this action.
- `404`: Resource does not exist.
- `409`: The invitation is no longer revocable (already accepted or expired).
- `502`: The identity provider could not be reached.
- `503`: Revoking invitations is unavailable (no hosted identity provider configured).

---

[API](https://skmtc.dev/dvt/apis/dvt-rest-api.md) · [All operations](https://skmtc.dev/dvt/apis/dvt-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dvt/apis/dvt-rest-api/revisions/00016f504165?raw)