---
title: "Lookup Care Team Invite"
method: POST
path: "/care-team-invite/lookup"
tags: ["care-team-invite"]
---

# Lookup Care Team Invite

`POST /care-team-invite/lookup`

## Request

- Base URL: `https://api.projectindi.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.projectindi.com/care-team-invite/lookup`
- Auth: none declared

Pre-claim sanitised preview for the worker landing page.

UNAUTHENTICATED - runs with service-role so the RLS SELECT-only-for-
inviter-or-claimer policy doesn't block the pre-claim path. Returns
ONLY the five allowed keys; raw fields (code, claimed_by,
child_care_team_id, raw IDs / emails) never reach the client.

No authentication required.

## Request body

- LookupInviteRequest
  - `code` string, required

## Response `200`

Successful Response

- CareTeamInviteLookupResponse: Sanitised preview for the unauthenticated /accept-invite landing page. SECURITY: this model IS the security boundary. Raw fields (code, claimed_by, child_care_team_id, raw IDs / emails) MUST NEVER appear here. ``member_email_hint`` is the one email-shaped field and it is **masked**, never raw - see :func:`mask_email`.
  - `status` string, required
  - `child_first_name` string, nullable
  - `parent_first_name` string, nullable
  - `member_first_name` string, nullable
  - `expires_at` string, nullable
  - `member_email_hint` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/projectindi/apis/indi-agent-api-first-principles.md) - [All operations](https://skmtc.dev/projectindi/apis/indi-agent-api-first-principles/llms.txt) - [OpenAPI document](https://skmtc.dev/projectindi/apis/indi-agent-api-first-principles/revisions/25a7813e21fd?raw)