Organizations
Manage your organization, members, roles, and invitations
Most resources in the API are scoped to a single organization. These endpoints manage the org itself, its members, and the roles that gate permissions.
Resource overview
GET
/api/organizationsSessionRole: Super AdminGET
/api/organizations/meAPI key · SessionPATCH
/api/organizations/meAPI key · SessionRole: AdminGET
/api/organizations/me/permissionsAPI key · SessionGET
/api/organizations/{id}SessionRole: Super AdminPATCH
/api/organizations/{id}SessionRole: Super AdminDELETE
/api/organizations/{id}SessionRole: Super AdminCurrent organization
GET
/api/organizations/meAPI key · SessionReturns the org backing the current session/API key.
PATCH
/api/organizations/meAPI key · SessionRole: Admin| Name | Type | Required | Description |
|---|---|---|---|
name | string | Optional | Display name. |
logo | string (url) | Optional | Logo URL. |
timezone | string | Optional | IANA timezone, e.g. `America/Los_Angeles`. |
My permissions
GET
/api/organizations/me/permissionsAPI key · SessionReturns the permission map for the calling user's role, useful for client-side gating.
Members
GET
/api/organizations/membersAPI key · SessionPermissions: users.readPATCH
/api/organizations/members/{memberId}API key · SessionPermissions: users.updateDELETE
/api/organizations/members/{memberId}API key · SessionPermissions: users.deleteRoles
GET
/api/organizations/rolesAPI key · SessionPermissions: roles.readPOST
/api/organizations/rolesAPI key · SessionPermissions: roles.createPATCH
/api/organizations/roles/{id}API key · SessionPermissions: roles.updateDELETE
/api/organizations/roles/{id}API key · SessionPermissions: roles.deleteOrg-scoped roles shadow system roles of the same name.
Invitations (org-level)
GET
/api/organizations/invitationsAPI key · SessionPermissions: users.readPOST
/api/organizations/invitationsAPI key · SessionPermissions: users.invitePOST
/api/organizations/invitations/{id}API key · SessionPermissions: users.inviteDELETE
/api/organizations/invitations/{id}API key · SessionPermissions: users.invitePOST /{id} resends the invite email. DELETE /{id} revokes a pending
invitation. To accept an invite as the recipient, see
Invitations.