---
title: "Validate a workspace invitation"
method: POST
path: "/credits/member-invitations/validate"
tags: ["Workspace members"]
---

# Validate a workspace invitation

`POST /credits/member-invitations/validate`

## Request

- Base URL: `https://api.paywithlocus.com/api`
- URL: `https://api.paywithlocus.com/api/credits/member-invitations/validate`
- Auth: none required

Returns a masked-email preview for a single-use invitation token. The token is read from the email URL fragment and submitted in JSON so it does not enter normal access logs or referrers.

## Request body

- object
  - `token` string, required

## Response `200`

Safe invitation preview

- object
  - `success` unknown, required
  - `data` object, required
    - `invitation` WorkspaceInvitationPreview, required
      - `id` string, uuid, required
      - `emailMasked` string, required
      - `workspaceName` string, required
      - `role` 'admin' | 'developer' | 'billing' | 'viewer', required
      - `status` string, required
      - `expiresAt` string, date-time, required

## Other responses

- `404`: Invitation is invalid, expired, revoked, or already consumed

---

[API](https://skmtc.dev/paywithlocus/apis/locus-pro-api.md) - [All operations](https://skmtc.dev/paywithlocus/apis/locus-pro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/paywithlocus/apis/locus-pro-api/revisions/aab8fa5d6cef?raw)