---
title: "Verify a workspace gate code without granting membership"
method: POST
path: "/workspaces/{slug}/join-code/verify"
---

# Verify a workspace gate code without granting membership

`POST /workspaces/{slug}/join-code/verify`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/workspaces/{slug}/join-code/verify`
- Auth: HTTP bearer

Requires gate:verify, gate:write or member:write workspace token scope. Verification is read-only; external bots must call join-grants after their Telegram/Discord/entitlement check passes.

## Path parameters

- `slug` string, required

## Request body

- object
  - `code` string, required

## Response `200`

Verified join code

- object
  - `workspace` Workspace, required
    - `slug` string, required
    - `name` string, required
    - `type` 'company' | 'community' | 'team' | 'course' | 'agency' | 'chat', required
    - `visibility` 'private' | 'invite_only' | 'gated' | 'public' | 'unlisted', required
    - `plan` 'free' | 'team' | 'enterprise', required
    - `description` string, nullable
    - `avatarUrl` string, nullable
  - `policy` WorkspaceJoinPolicy, required: Workspace join gate metadata. No raw invite code, bot secret, token or external credential is exposed.
    - `id` string, required
    - `workspaceId` string
    - `workspaceSlug` string
    - `kind` 'invite' | 'email_domain' | 'telegram' | 'discord' | 'entitlement' | 'paid_subscription' | 'manual_approval', required
    - `status` 'active' | 'disabled', required
    - `role` 'member' | 'viewer', required
    - `title` string, nullable
    - `instructions` string, nullable
    - `config` object, required
    - `createdAt` string, required
    - `updatedAt` string, required
  - `allowed` boolean, required
  - `source` string, required
  - `subject_type` string, required
  - `subject_id` string, required
  - `expires_at` string, date-time, required
  - `next` string, required

## Other responses

- `400`: Bad request
- `401`: Authorization required
- `403`: Authorization was provided but is not allowed for this action
- `410`: Join code expired
- `503`: Workspace join secret is not configured

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)