---
title: "POST /invitations/{token}/accept"
method: POST
path: "/invitations/{token}/accept"
tags: ["svc-org-management_other"]
---

# POST /invitations/{token}/accept

`POST /invitations/{token}/accept`

Accept and consume an invitation token to join the organization

## Path parameters

- `token` string, required

## Headers

- `X-Client-Request-ID` string, uuid

## Response `200`

Invitation accepted successfully

- OrgManagementInvitationAcceptResult — Result of accepting an invitation
  - `success` boolean, required — Whether the invitation was successfully accepted
  - `organization_id` string, required — Identifier for API resources. A 26-char nanoid (URL/DNS safe).
  - `organization_name` string, required — A name for the entity to be displayed in UI
  - `user_id` string — Identifier for API resources. A 26-char nanoid (URL/DNS safe).

## Other responses

- `400` — bad request error response when caller supplied invalid input data
- `403` — Email mismatch or invitation cannot be accepted by current user
- `404` — not found error response when caller does not have permission to see a resource or the resource does not exist
- `410` — Invitation has expired or already been consumed
- `429` — rate limit exceeded error response when caller has exhausted api limits for the given time period
- `500` — internal server error response when server encountered error of its own creation
- `503` — service unavailable error when server you're attempting to reach is not available
- `default` — internal server error response when server encountered error of its own creation

## Changes

- **2026-03-16** `d3d69f45bfed` — 3 info
  - the endpoint scheme security `OAuth2` was added to the API
  - the endpoint scheme security `bearerAuth` was added to the API
  - the endpoint scheme security `org-management_bearerAuth` was removed from the API
- **2026-02-06** `edd1b760a989` — 1 warning, 2 info
  - deleted the `header` request parameter `X-Request-ID`
  - the endpoint scheme security `org-management_bearerAuth` was added to the API
  - the endpoint scheme security `svc-org-management_bearerAuth` was removed from the API

[Change history](https://skmtc.dev/keycardai/apis/untitled-api/changes/invitations/:token/accept/post.md)

---

[API](https://skmtc.dev/keycardai/apis/untitled-api.md) · [All operations](https://skmtc.dev/keycardai/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/keycardai/untitled-api/revisions/d65d51379d93/schema)