List invitations

GET /v1/invitations · permission invitations:read

Lists the environment's invitations, oldest first. Only forward pagination is supported. Filters: organization_id, email (exact match) and status. The cursor is bound to the filters; the e-mail enters the cursor only as a keyed hash. Accept links are never listed.

Request

Field Type Required Description
limit query no 1–100, default 20.
after query no Cursor from list_metadata.after.
organization_id query no Organization ID (org_…).
email query no E-mail address (exact match).
status query no pending, accepted, revoked or expired.

No request body.

Response

200 OK with a page of invitations.

{
  "data": [
    {
      "id": "inv_01j9xt9v3w4y8z0a2b4c6d8e0g",
      "organization_id": "org_01j9xk3m7q8r2s4t6v8w0y2z4a",
      "email": "ada@example.com",
      "role_ids": [
        "rol_01j9xr7s1t2w6x8y0z2a4b6c8e"
      ],
      "application_id": null,
      "delivery": "link_only",
      "delivery_status": "not_sent",
      "status": "pending",
      "send_count": 1,
      "last_sent_at": "2026-10-12T09:31:00.123456Z",
      "expires_at": "2026-10-19T09:31:00.123456Z",
      "accepted_user_id": null,
      "accepted_at": null,
      "revoked_at": null,
      "created_at": "2026-10-12T09:31:00.123456Z",
      "updated_at": "2026-10-12T09:31:00.123456Z",
      "version": 1
    }
  ],
  "list_metadata": {
    "before": null,
    "after": null
  }
}

Errors

HTTP code When
400 invalid_cursor The cursor is invalid or belongs to other filters.
422 validation_failed A filter or limit is invalid, or before or a non-asc order was given.
401 unauthenticated The credential is missing, invalid or revoked.
403 insufficient_permissions The credential lacks the required permission.
429 rate_limited The rate limit was exceeded; retry after the Retry-After period.
503 service_unavailable A dependency is temporarily unavailable; retry after the Retry-After period.

Example

curl -i "https://api.eu.keenauth.com/v1/invitations?organization_id=org_01j9xk3m7q8r2s4t6v8w0y2z4a&status=pending" \
  -H "Authorization: Bearer $KEENAUTH_SECRET_KEY"

Personal data

This endpoint carries personal data: organization memberships and invitations. Personal data in the KeenAuth APIs describes what is stored, how long it is kept and how it is deleted. Do not send special categories of personal data (health, biometric data, religion, political opinions, sexual orientation) in any field.