---
title: "Issue a triager invite"
method: POST
path: "/v1/invites/triager/"
tags: ["invites"]
---

# Issue a triager invite

`POST /v1/invites/triager/`

## Request

- Base URL: `https://api.ethiack.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ethiack.com/v1/invites/triager/`
- Auth: none declared

Issue a triager invite and send its email.

Args:
    body (CreateTriagerInviteRequest): The invitee email.
    db (AsyncSession): Request-scoped database session.
    context (ActiveContext): Resolved caller identity and scope.

Returns:
    TriagerInviteResponse: The issued invite (never the token).

## Request body

- CreateTriagerInviteRequest: Body for ``POST /v1/invites/triager``. Triager invites carry no scope or role — the kind is platform-wide. Attributes: email (EmailStr): Invitee email address.
  - `email` string, email, required

## Response `201`

Successful Response

- TriagerInviteResponse: A triager invite as admins see it (never the token). Triager invites carry no scope or grant role — the shared lifecycle fields are the whole shape.
  - `id` integer, required
  - `kind` 'organization' | 'partner' | 'triager', required: Which user kind an account invite grants on redemption. Doubles as the joined-table-inheritance discriminator: ``TRIAGER`` is the base :class:`Invite` (no grant payload); ``ORGANIZATION`` / ``PARTNER`` select the typed child. Attributes: ORGANIZATION: Membership in the invite's organization. PARTNER: Membership in the invite's partner. TRIAGER: The triager kind (platform-scoped, no payload).
  - `email` string, required
  - `status` 'pending' | 'redeemed' | 'revoked', required: The single terminal-state of an invite's lifecycle. A live invite is ``PENDING``; it moves once, irreversibly, to exactly one terminal state. Modelling this as one enum (rather than separate per-outcome timestamps) makes "redeemed AND revoked" unrepresentable rather than merely constraint-guarded, and mirrors :class:`~phoenix.db.models.pentest_hacker_invite.PentestHackerInviteStatus`. Expiry is NOT a member — it is passive and time-derived from ``expires_at``. Attributes: PENDING: Live and awaiting redemption (paired with a null ``resolved_at``). REDEEMED: Consumed by its invitee. REVOKED: Rescinded by a manager before redemption.
  - `created_at` string, date-time, required
  - `expires_at` string, date-time, required
  - `resolved_at` string, date-time, nullable, required
  - `redeemed_by_user_id` string, nullable, required
  - `expired` boolean, required
  - `live` boolean, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ethiack/apis/ethiack-api.md) - [All operations](https://skmtc.dev/ethiack/apis/ethiack-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ethiack/apis/ethiack-api/revisions/4eaba89bfebf?raw)