---
title: "Turn a member's invitation link off (admin)"
method: POST
path: "/api/admin/invites/{id}/revoke"
---

# Turn a member's invitation link off (admin)

`POST /api/admin/invites/{id}/revoke`

## Request

- Base URL: `https://www.toma.com`
- URL: `https://www.toma.com/api/admin/invites/{id}/revoke`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `better-auth.session_token`

Toma staff only (a verified @toma.so or @toma.com address). The link lets nobody else in; people who already joined with it keep their accounts, and the owner gets no replacement. Same as the revoke_invite_link MCP tool.

## Path parameters

- `id` string, required

## Response `200`

The link, now turned off.

- StaffInviteLink
  - `id` string, required
  - `link` string, uri, required
  - `uses` integer, required
  - `createdAt` string, date-time, required
  - `revokedAt` string, date-time, nullable, required
  - `owner` object, required
    - `id` string, required
    - `name` string, required
    - `email` string, required

## Other responses

- `401`: No valid session or API key.
- `403`: Not Toma staff.
- `404`: No invitation link has that id.
- `409`: Already turned off.

---

[API](https://skmtc.dev/toma/apis/toma-api.md) - [All operations](https://skmtc.dev/toma/apis/toma-api/llms.txt) - [OpenAPI document](https://skmtc.dev/toma/apis/toma-api/revisions/b4e56e1db5a2?raw)