Site invitations
Invite a member to a site
Invites a member of the company to one of the member’s sites, offering view or edit. The invitation grants nothing until the invitee accepts it, which adds a member share; it can be answered for 7 days. A site has one invitation per member: inviting a member who already has one, whatever became of it, sends it again with this role and a new expiry, and answers 200 with it. The first invitation answers 201.
The member must be a member of the company and not the caller, and the company’s messaging policy must let the caller reach them (403 outside_messaging_scope otherwise). A member the site is already shared with by a member share answers 422 already_shared. A branch takes no invitations.
A bearer only, as sharing is: a request on the cookie mount is refused with 403, with or without an X-Fluid-Member-Site header, and so is a member JWT. It answers 404 while member sites are not enabled for the member’s company. A portal JWT minted read-only is refused with 403.
POST
/
api
/
member
/
v2026-10
/
sites
/
{site_id}
/
invitations
Invite a member to a site
curl --request POST \
--url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"role": "view"
}
'import requests
url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations"
payload = {
"member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"role": "view"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({member_id: '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12', role: 'view'})
};
fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'member_id' => '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12',
'role' => 'view'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations"
payload := strings.NewReader("{\n \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12\",\n \"role\": \"view\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12\",\n \"role\": \"view\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12\",\n \"role\": \"view\"\n}"
response = http.request(request)
puts response.read_body{
"status": 200,
"data": {
"id": "0193a1b2-4c5d-7e6f-8a9b-0c1d2e3f4a5b",
"state": "pending",
"role": "view",
"invitee": {
"id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"name": "Casey Brooks",
"email": "casey@example.com"
},
"sent_at": "2026-11-10T22:00:00.000000Z",
"expires_at": "2026-11-17T22:00:00.000000Z",
"decided_at": null,
"created_at": "2026-11-10T22:00:00.000000Z"
},
"meta": {
"request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
"timestamp": "2026-11-10T22:05:00Z"
}
}{
"status": 201,
"data": {
"id": "0193a1b2-4c5d-7e6f-8a9b-0c1d2e3f4a5b",
"state": "pending",
"role": "view",
"invitee": {
"id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"name": "Casey Brooks",
"email": "casey@example.com"
},
"sent_at": "2026-11-10T22:00:00.000000Z",
"expires_at": "2026-11-17T22:00:00.000000Z",
"decided_at": null,
"created_at": "2026-11-10T22:00:00.000000Z"
},
"meta": {
"request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
"timestamp": "2026-11-10T22:05:00Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}Authorizations
A member credential in the Authorization: Bearer header: a member
session JWT, a portal JWT whose login is linked to a membership in
that company, an opaque member token, or a verified One Auth identity
access token. The credential alone identifies the member and company.
Member session JWTs, and portal JWTs the server minted read-only, are
refused with 403 on every write.
Path Parameters
Public id of one of the member's sites.
Body
application/json
The member to invite and the role offered. Any other field is refused as an unknown field.
Response
The member's invitation, sent again.
One invitation to one of the member's sites.
HTTP status code (mirrors the response status line).
One invitation to one of the member's sites, as its owner sees it. It carries the invitee's email address only when the company's messaging policy shows members' emails, as the share picker does.
Show child attributes
Show child attributes
Envelope metadata present on every response.
Show child attributes
Show child attributes
⌘I
Invite a member to a site
curl --request POST \
--url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"role": "view"
}
'import requests
url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations"
payload = {
"member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"role": "view"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({member_id: '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12', role: 'view'})
};
fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'member_id' => '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12',
'role' => 'view'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations"
payload := strings.NewReader("{\n \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12\",\n \"role\": \"view\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12\",\n \"role\": \"view\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/invitations")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12\",\n \"role\": \"view\"\n}"
response = http.request(request)
puts response.read_body{
"status": 200,
"data": {
"id": "0193a1b2-4c5d-7e6f-8a9b-0c1d2e3f4a5b",
"state": "pending",
"role": "view",
"invitee": {
"id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"name": "Casey Brooks",
"email": "casey@example.com"
},
"sent_at": "2026-11-10T22:00:00.000000Z",
"expires_at": "2026-11-17T22:00:00.000000Z",
"decided_at": null,
"created_at": "2026-11-10T22:00:00.000000Z"
},
"meta": {
"request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
"timestamp": "2026-11-10T22:05:00Z"
}
}{
"status": 201,
"data": {
"id": "0193a1b2-4c5d-7e6f-8a9b-0c1d2e3f4a5b",
"state": "pending",
"role": "view",
"invitee": {
"id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d12",
"name": "Casey Brooks",
"email": "casey@example.com"
},
"sent_at": "2026-11-10T22:00:00.000000Z",
"expires_at": "2026-11-17T22:00:00.000000Z",
"decided_at": null,
"created_at": "2026-11-10T22:00:00.000000Z"
},
"meta": {
"request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
"timestamp": "2026-11-10T22:05:00Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": 123,
"error": {
"message": "<string>",
"details": {}
},
"meta": {
"request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z"
}
}