---
title: "Create zone invitation"
method: POST
path: "/zones/{zoneId}/invitations"
tags: ["Invitations"]
---

# Create zone invitation

`POST /zones/{zoneId}/invitations`

Creates a new invitation to join a zone and sends an email notification. Only available when the zone has no external identity provider configured.

## Path parameters

- `zoneId` string, required

## Request body

- IamInvitationCreate — Schema for creating a new zone invitation
  - `email` string, email, required — Email address to send the invitation to

## Response `201`

A zone invitation sent to a user by email

- IamInvitation — A zone invitation sent to a user by email
  - `id` string, required — Unique identifier of the invitation
  - `organization_id` string, required — Organization that owns this invitation
  - `zone_id` string, required — Zone this invitation belongs to
  - `email` string, email, required — Email address the invitation was sent to
  - `status` 'pending' | 'accepted' | 'expired', required — Status of a zone invitation
  - `created_by` string, required — ID of the user who created the invitation
  - `created_by_email` string, email — Email address of the user who created the invitation
  - `expires_at` string, date-time, required — Date when the invitation expires
  - `last_sent_at` string, date-time, required — Date when the invitation email was last sent
  - `created_at` string, date-time, required — Entity creation timestamp
  - `updated_at` string, date-time, required — Entity update timestamp

## Other responses

- `400` — Error response
- `401` — Error response
- `404` — Error response
- `409` — Error response
- `default` — Error response

## Changes

- **2026-08-26** `d65d51379d93` — 3 info
  - added the non-success response with the status `400`
  - added the non-success response with the status `404`
  - added the non-success response with the status `409`
- **2026-05-07** `2abdf2efe2e6` — 1 breaking
  - the response property `last_sent_at` became nullable for the status `201`
- **2026-03-16** `d3d69f45bfed` — 3 info
  - the endpoint scheme security `OAuth2` was added to the API
  - the endpoint scheme security `bearerAuth` was added to the API
  - the endpoint scheme security `iam_bearerAuth` was removed from the API
- **2026-03-09** `cb43483cd1b3` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/keycardai/apis/untitled-api/changes/zones/:zoneId/invitations/post.md)

---

[API](https://skmtc.dev/keycardai/apis/untitled-api.md) · [All operations](https://skmtc.dev/keycardai/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/keycardai/untitled-api/revisions/d65d51379d93/schema)