Onboarding

Email a time-limited setup checklist capability to a delegate

A newly minted raw 256-bit capability is returned once inside delegateUrl and sent by email; only its SHA-256 digest is stored. Retrying the same identity while its server-owned checklist remains live reuses that invite, sends no second email, and omits delegateUrl. A pending invite is inert until delivery succeeds; failed replacement delivery revokes only that pending invite and preserves the prior active checklist and assignments. QA delivery is SendGrid sandbox-only (or recipient-allowlisted); live delivery requires the separate promotion-time environment flip.

post/onboarding/v3/delegate-invites

Request

  • Base URL: https://api.medianfi.com/api/v1
  • URL: https://api.medianfi.com/api/v1/onboarding/v3/delegate-invites
  • Auth: HTTP bearer

Headers

X-Median-App-Surface'qa'

Bundle marker selecting the temporary /qa onboarding surface. Optional on this promoted deployment (ONBOARDING_V3_QA_ONLY=false): unmarked requests are served, and a qa value is accepted and ignored. Still required on any deployment running ONBOARDING_V3_QA_ONLY=true, where an unmarked request receives the hidden-resource 404. On neither setting is it a tenant authorization credential.

Request body

namestring required
emailstring email required

Response

Matching live delegate capability reused without another email

successtrue required

Changes

No recorded changes to this operation across all 1 revision of this API.