---
title: "Add or update a workspace member"
method: POST
path: "/workspaces/{slug}/members"
---

# Add or update a workspace member

`POST /workspaces/{slug}/members`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/workspaces/{slug}/members`
- Auth: HTTP bearer

Requires member:write token scope or owner/admin member role. This is the direct admin path; invite join is separate. Workspace ownership cannot be assigned or transferred through this endpoint, and the existing owner cannot be changed.

## Path parameters

- `slug` string, required

## Request body

- object
  - `userId` string, required
  - `role` 'admin' | 'moderator' | 'publisher' | 'member' | 'viewer'
  - `source` string
  - `expiresAt` string, date-time, nullable: Optional membership expiry. When expired, member-session reads and private archive access fail closed.

## Response `201`

Workspace member

- object
  - `workspace` Workspace
    - `slug` string, required
    - `name` string, required
    - `type` 'company' | 'community' | 'team' | 'course' | 'agency' | 'chat', required
    - `visibility` 'private' | 'invite_only' | 'gated' | 'public' | 'unlisted', required
    - `plan` 'free' | 'team' | 'enterprise', required
    - `description` string, nullable
    - `avatarUrl` string, nullable
  - `member` WorkspaceMember
    - `id` string
    - `workspace_id` string
    - `workspace_slug` string
    - `user_id` string, required
    - `role` 'owner' | 'admin' | 'moderator' | 'publisher' | 'member' | 'viewer', required
    - `status` 'invited' | 'active' | 'suspended' | 'removed', required
    - `source` 'direct' | 'invite' | 'email_domain' | 'telegram' | 'discord' | 'entitlement' | 'paid_entitlement' | 'token_bootstrap', required
    - `joined_at` string, required
    - `expires_at` string, nullable
    - `removed_at` string, nullable

## Other responses

- `400`: Bad request
- `401`: Authorization required
- `403`: Authorization was provided but is not allowed for this action
- `404`: Resource not found
- `409`: Workspace owner assignment or mutation is forbidden through this endpoint

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)