Cancel an invitation
DELETE
Owners and admins only. The link stops working.
sessioncookie
better-auth.session_token<token>Set by POST /api/auth/sign-in/email.
ws*stringThe workspace id (from GET /api/me).
id*stringThe id of what the path names: a hire, a connection, a skill, a shared file, a department, a position, a goal or an approval.
Done; no body.
curl -X DELETE 'https://app.useroster.work/api/workspaces/string/invitations/string'Example Response
Empty
Invite someone by email POST
Owners and admins only. Emails them a link to accept (without mail set up, the link is in the server log). An invitation already waiting for that address is replaced; someone already in the workspace isn't invited.
API tokens GET
Tokens agents use to work in this workspace through Roster's MCP server. Your own; owners and admins see everyone's. Never the token itself: only its first characters, and when it was last used. Made and revoked in the app only.