Skip to content
Select themeSelect language

GET /invites/incoming — list pending invites where the caller's email matches the recipient. Lets the UI render an "you've been invited" panel without the invitee having to paste a raw token.

GET
/api/invites/incoming
curl --request GET \
--url https://example.com/api/invites/incoming \
--cookie supacloud_session=<supacloud_session>

Pending invites addressed to the caller

Media typeapplication/json
Array<object>
object
created_at
required
string format: date-time
expires_at
required
string format: date-time
id
required
string format: uuid
invited_by
required
string format: uuid
invited_by_display_name
required
string | null
invited_by_email
required
string | null
role
required
string
workspace_id
required
string format: uuid
workspace_name
required
string
Examplegenerated
[
{
"created_at": "2026-04-15T12:00:00Z",
"expires_at": "2026-04-15T12:00:00Z",
"id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
"invited_by": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
"invited_by_display_name": "example",
"invited_by_email": "example",
"role": "example",
"workspace_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
"workspace_name": "example"
}
]

Authentication required

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
"code": "not_found"
}

Structured server error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
"code": "not_found"
}