Invitations and access codes

All routes live under https://chat.realmoon.ai/api/v1/orgs/{org_id} and require the members:write scope, including for reads. An invitation is valid for 7 days; the person who accepts it joins the organization with everything that was set up for them, and the member.joined webhook event is sent at that point.

A key never grants the admin role: an admin invitation or access code is reserved for the owner of the organization (403 owner_only_admin_role).

The invitation object#Link to the The invitation object section

{
  "id": "7e2a4c6b-8d0f-4a1b-9c3d-5e7f9a1b3c5d",
  "email": "tom.bernard@ecole.fr",
  "role": "member",
  "created_by": "a11f3c5e-7b9d-4f1a-8c2e-4d6f8a0b2c4e",
  "created_by_name": "Camille Martin",
  "created_at": 1762339200,
  "expires_at": 1762944000,
  "expired": false,
  "groups": [{ "id": "<group id>", "name": "Seconde 3" }],
  "labels": [],
  "roles": [{ "key": "manager", "name": "Responsable" }],
  "license": null
}

groups, labels, roles and license are what the person will receive when they join. When an invitation is resent, its author becomes the person or key that resent it.

Read the limits#Link to the Read the limits section

GET /invitations/limits · members:write

{
  "under_contract": false,
  "paid": true,
  "seats_left": 12,
  "pending": 4,
  "pending_cap": 200,
  "daily": { "workspace": 50, "sender": 50, "recipient": 3 },
  "managed": false,
  "email_configured": true,
  "max_emails": 200
}

Daily limits count over a rolling 24 hours. For a key, the sender is the person who created it. The same email address receives at most 3 invitations per day from one organization, even under contract.

Invite#Link to the Invite section

POST /invitations · members:write

The same roles, groups, labels and pool apply to every email address in the request.

curl https://chat.realmoon.ai/api/v1/orgs/$ORG_ID/invitations \
  -H "Authorization: Bearer $MOONAI_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: rentree-2026-seconde-3" \
  -d '{"emails": ["tom.bernard@ecole.fr", "lea.dupont@ecole.fr"], "group_ids": ["<group id>"]}'

import os
import requests

BASE = f"https://chat.realmoon.ai/api/v1/orgs/{os.environ['ORG_ID']}"
HEADERS = {
    "Authorization": f"Bearer {os.environ['MOONAI_ADMIN_KEY']}",
    "Idempotency-Key": "rentree-2026-seconde-3",
}

r = requests.post(
    f"{BASE}/invitations",
    headers=HEADERS,
    json={"emails": ["tom.bernard@ecole.fr", "lea.dupont@ecole.fr"], "group_ids": [os.environ["GROUP_ID"]]},
    timeout=60,
)
r.raise_for_status()
for line in r.json()["results"]:
    print(line["email"], line["status"], line["code"])

const BASE = `https://chat.realmoon.ai/api/v1/orgs/${process.env.ORG_ID}`;
const r = await fetch(`${BASE}/invitations`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.MOONAI_ADMIN_KEY}`,
    'Content-Type': 'application/json',
    'Idempotency-Key': 'rentree-2026-seconde-3',
  },
  body: JSON.stringify({ emails: ['tom.bernard@ecole.fr', 'lea.dupont@ecole.fr'], group_ids: [process.env.GROUP_ID] }),
});
if (!r.ok) throw new Error(await r.text());
for (const line of (await r.json()).results) console.log(line.email, line.status, line.code);

{
  "results": [
    { "email": "tom.bernard@ecole.fr", "status": "invited", "code": null, "message": null, "invitation_id": "7e2a4c6b-8d0f-4a1b-9c3d-5e7f9a1b3c5d", "expires_at": 1762944000, "link": "https://chat.realmoon.ai/invite/<token>" },
    { "email": "lea.dupont@ecole.fr", "status": "already_member", "code": null, "message": null, "invitation_id": null }
  ],
  "summary": { "invited": 1, "reinvited": 0, "already_member": 1, "errors": 0 },
  "email_sent": true
}

Each email address gets its own line:

link is the person’s invitation link: treat it as a secret. email_sent says that email sending is set up, not that the email was received.

Errors for the whole request:

List invitations#Link to the List invitations section

GET /invitations · members:write

Most recent first. Accepted or revoked invitations are not listed.

Resend an invitation#Link to the Resend an invitation section

POST /invitations/{invitation_id}/resend · members:write

Creates a new link (the old one is disabled), valid for 7 days, with the same groups, roles, labels and license. An expired invitation can be resent if a seat is still free.

{ "invitation_id": "7e2a4c6b-8d0f-4a1b-9c3d-5e7f9a1b3c5d", "expires_at": 1762944000, "link": "https://chat.realmoon.ai/invite/<token>", "email_sent": true }

Revoke an invitation#Link to the Revoke an invitation section

DELETE /invitations/{invitation_id} · members:write

Response: {"success": true}. The link is disabled and everything set up for the person is deleted. Revoking it a second time returns 404.

Access codes#Link to the Access codes section

An access code lets people join the organization without a personal invitation: 8 characters drawn from uppercase letters and digits, without I, O, 0 or 1.

GET /access-codes · members:write

{ "items": [{ "id": "c3b2a1f0-9e8d-4c7b-a6f5-e4d3c2b1a0f9", "code": "K7MZ4QPA", "role": "member", "max_uses": 30, "uses_count": 12, "expires_at": 1762944000, "created_at": 1762339200 }] }

Only usable codes (not revoked, not expired, not used up) are listed, most recent first.

POST /access-codes · members:write

An empty body {} creates a single-use code valid for 7 days. The response is the new code. A code is revoked automatically when its creator leaves the organization or loses the admin role.

DELETE /access-codes/{code_id} · members:write

Response: {"success": true}, also for a code that is already revoked or expired.

See also#Link to the See also section

• Members
• Domains, to invite the existing accounts of a domain
• Licenses