Invite people to the team
POST
/org-admin/{slug}/invites
nonprofit.team.manage. Up to 20 emails; each gets the org_invite email (link /nonprofits/invite/{token}, 30 days). Nobody grants above their own role. Audited as organization.invite_sent.
Authorizations
BearerAuth
In the browser, authentication rides on the httpOnly session cookies set by /cognito/signin or the Google / Apple sign-in at /cognito/oauth/{provider}. For scripts and for Swagger UI testing, paste an API key (fh_live_…, created with POST /api-keys); a Cognito JWT is accepted too. Sign-in does not return a token in its body.
Type
HTTP (bearer)
Parameters
Path Parameters
slug*
The organization's slug (requireOrgPermission resolves it).
Type
Requiredstring
Request Body
application/json
JSON
{
"emails": [
"string"
],
"role": "string",
"title": "string"
}
Responses
OK
application/json
JSON
{
"created": [
],
"skipped": [
{
"email": "string",
"reason": "string"
}
]
}