---
title: "Invite one more person to an existing firm (operators only)"
method: POST
path: "/v1/admin/firms/{org}/invitations"
tags: ["admin"]
---

# Invite one more person to an existing firm (operators only)

`POST /v1/admin/firms/{org}/invitations`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/admin/firms/{org}/invitations`
- Auth: HTTP bearer

Reads the organisation for its name, then sends the invitation (role `member` unless named). Sends no email: the answer carries the sentence to send by hand and the download url.

## Path parameters

- `org` string, required

## Request body

- object
  - `email` string, required
  - `role` 'admin' | 'billing' | 'member'

## Response `201`

The invitation.

- object
  - `invitation` object, required
    - `id` string, required
    - `email` string, required
    - `role` 'admin' | 'billing' | 'member', required
    - `expires_at` string, required
  - `download_url` string, required
  - `message` string, required

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.
- `429`: Too many requests; `Retry-After` says how long to wait.
- `502`: An upstream this service depends on failed or answered nonsense.
- `503`: A capability this service was not configured with, or a practice system that could not be reached; the `type` says which.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)