---
title: "Invite a new member to the workspace"
method: POST
path: "/api/members/invite"
tags: ["Team members"]
---

# Invite a new member to the workspace

`POST /api/members/invite`

## Request

- Base URL: `https://api.setluca.com`
- URL: `https://api.setluca.com/api/members/invite`
- Auth: API key in cookie `luca.session_token`

**Session-only.** This endpoint isn't on the API-key allowlist. An organization API key gets a 403 here, whatever scopes it holds.

## Headers

- `Luca-API-Version` '1'

## Request body

- InviteMemberBody
  - `email` string, email, required
  - `role` 'admin' | 'manager' | 'operator' | 'analyst' | 'viewer', required
  - `permissionOverrides` object
    - `allow` string[]

## Response `200`

ok

- InviteMemberResponse
  - `invitation` object, required
    - `id` string, required
    - `email` string, required
    - `role` 'admin' | 'manager' | 'operator' | 'analyst' | 'viewer', required
    - `status` 'pending', required
    - `expiresAt` string, nullable, required
    - `permissionOverrides` object, nullable, required
      - `allow` string[]
    - `createdAt` string, required
    - `capabilities` object, required
      - `resend` boolean, required
      - `revoke` boolean, required

## Other responses

- `400`: bad request
- `401`: unauthorized
- `403`: forbidden
- `404`: not found
- `409`: conflict
- `410`: gone
- `429`: rate limited
- `500`: internal error
- `502`: upstream failure
- `503`: service unavailable

---

[API](https://skmtc.dev/setluca/apis/luca-api.md) · [All operations](https://skmtc.dev/setluca/apis/luca-api/llms.txt) · [OpenAPI document](https://skmtc.dev/setluca/apis/luca-api/revisions/90a200e4100b?raw)