# Create invitation

`POST https://api.endless.app/organizations/{organization_id}/invitations`

Source: https://endless.app/docs/api/invitations/create

Creates an invitation and returns the created row. Scoped to the organization named by `organization_id`.

## Authentication

- `bearerAuth`: HTTP bearer (JWT)

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `organization_id` | path | string | yes |  |
| `Endless-Api-Version` | header | string | no | Pin the caller to an API major (`1`). Omit to accept the current version. A major this deployment cannot serve is refused with 400 `unsupported_api_version`. |

## Request body

Required.

Content type: `application/json` — object

- `invitations` (array<object>, required)
  - `email_address` (string (email), required)
  - `role` ("org:admin" | "org:billing_manager" | "org:member" | "org:viewer")
  - `team_ids` (array<string>)
  - `spending_limit` (integer)

## Responses

### 200 OK

Content type: `application/json` — object

- `invitations` (array<object>, required)
  - `id` (string, required)
  - `email_address` (string, required)
  - `role` ("org:admin" | "org:billing_manager" | "org:member" | "org:viewer", required)
- `errors` (array<object>, required)
  - `email_address` (string, required)
  - `error` (string, required)

### Errors

- `400` (Error): The request is malformed, or failed input validation. `message` names the field and the rule it broke; `data.issues` carries them individually.
- `401` (Error): No bearer token, or a token that failed verification.
- `402` (Error): The workspace has no credits left, or the caller is over a spending limit.
- `403` (Error): Authenticated, but the caller's role in this workspace does not carry the permission this operation needs.
- `404` (Error): No resource with that id, or the caller cannot read it. The two are deliberately one answer, so an id cannot be probed for existence.
- `409` (Error): The request is well-formed, but the resource's current state forbids it — a taken name, a last admin, a limit already reached.
- `429` (Error): The caller has spent its rate-limit window. `Retry-After` says when to come back.
- `500` (Error): The request failed on our side. Safe to retry an idempotent operation with backoff.