Team API

Manage members, roles, and invites within an organization.

Authentication: JWT Base path: /api/v1/team

Role-based access control:

owner — full access; only one per org
admin — manage members, invites, settings; cannot remove owner
developer — read everything, no member management
viewer — read-only

Permission enforcement is in the service layer; calls that exceed your role return 403 forbidden.

Get current user info

GET /api/v1/team/me

Returns the membership record of the currently-authenticated user in their currently-active org.

Response

{
  "message": "User retrieved",
  "data": {
    "id": "uuid",
    "user_id": "uuid",
    "email": "you@company.com",
    "full_name": "Your Name",
    "role": "owner",
    "status": "active",
    "joined_at": "2026-06-01T10:00:00Z"
  }
}

Update own profile

PUT /api/v1/team/me

Request body

Field	Type	Required	Description
`full_name`	string	Yes	New display name

List members

GET /api/v1/team/members

Returns every active member of the organization.

Response

{
  "message": "Members retrieved",
  "data": {
    "members": [
      {
        "id": "uuid",
        "user_id": "uuid",
        "email": "owner@company.com",
        "full_name": "Owner Person",
        "role": "owner",
        "status": "active",
        "joined_at": "2026-05-01T10:00:00Z"
      }
    ],
    "count": 1
  }
}

List pending invites

GET /api/v1/team/invites

Returns invites that have been sent and not yet accepted, declined, or expired.

{
  "data": {
    "invites": [
      {
        "id": "uuid",
        "email": "newperson@company.com",
        "role": "developer",
        "role_display_name": "Developer",
        "invited_by_name": "Owner Person",
        "expires_at": "2026-06-16T10:00:00Z",
        "is_expired": false,
        "created_at": "2026-06-09T10:00:00Z"
      }
    ],
    "count": 1
  }
}