Base URL
Prerequisites
- API Key with the
USER_MANAGEMENT_APIscope - The API key must be created by a workspace admin
Behavior
- Already a member? Silently skipped.
- Has a pending join request? Automatically approved.
- Invalid email domain? Reported in
invalidEmailsbut doesn’t fail the request. - SAML disabled? The invitation email includes a magic link for passwordless sign-in.
- SAML enabled? Users outside your verified domains get a magic link when Allow External Authentication is on.
A
200 response can still contain invalidEmails — these are emails that passed format validation but failed deeper checks (e.g., unreachable domain). Always check both successfulInvites and invalidEmails in the response.Langdock intentionally blocks browser-origin requests to protect your API key and ensure your applications remain secure. For more information, please see our guide on API Key Best Practices.