---
title: "Accept an invitation"
method: POST
path: "/auth/accept-invitation"
tags: ["auth"]
---

# Accept an invitation

`POST /auth/accept-invitation`

## Request

- Base URL: `https://api.sytecheck.app` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sytecheck.app/auth/accept-invitation`
- Auth: none declared

Set a password using an invitation token and sign in. The address is already
confirmed, so no separate verification step is needed.

Unknown, expired, and already-used tokens are all refused identically, so this
cannot be used to discover which addresses have accounts.

## Request body

- AcceptInvitationBody: Take possession of an admin-created account by setting its first password.
  - `token` string, required
  - `password` string, required

## Response `200`

Successful Response

- TokenResponse
  - `access_token` string, required
  - `refresh_token` string, required
  - `token_type` string
  - `offer_status` 'claimed' | 'invalid', nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/sytecheck/apis/sytecheck-api.md) · [All operations](https://skmtc.dev/sytecheck/apis/sytecheck-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sytecheck/apis/sytecheck-api/revisions/797cf6b3e867?raw)