> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neo.projectdiscovery.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Accept invitation

> Accept a pending team invitation.



## OpenAPI

````yaml https://neo.api.projectdiscovery.io/api/openapi.json post /api/v1/teams/invitations/accept
openapi: 3.1.0
info:
  contact:
    name: ProjectDiscovery
    url: https://neo.projectdiscovery.io
  description: Neo API Server - Security agent orchestration platform
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  title: Neo API
  version: 1.0.0
servers:
  - description: Production
    url: https://neo.api.projectdiscovery.io
  - description: Local development
    url: http://localhost:8080
security: []
tags:
  - description: Task execution and management
    name: Tasks
  - description: Agent listing and management
    name: Agents
  - description: Public agent directory
    name: Agent Directory
  - description: User file storage management
    name: Files
  - description: User working memory management
    name: Memory
  - description: Scheduled and recurring task management
    name: Schedules
  - description: Knowledge base and semantic search
    name: Knowledge
  - description: Encrypted user credentials and API keys
    name: Secrets
  - description: Neo API key management for programmatic access
    name: API Keys
  - description: User profile and account information
    name: User
  - description: Task and LLM usage tracking
    name: Usage
  - description: Bring Your Own Key provider management
    name: BYOK
  - description: Model discovery and capabilities
    name: Models
  - description: Third-party integrations
    name: Integrations
  - description: Skill knowledge documents for agent prompts
    name: Skills
  - description: Team management and member invitations
    name: Teams
  - description: Prompt library management and discovery
    name: Prompts
  - description: Slack bot integration for workspace installation and OAuth
    name: Slack
  - description: GitHub integration for PR reviews and repository management
    name: GitHub
  - description: Vulnerability issue tracking and management
    name: Issues
  - description: Subscription billing and plans
    name: Billing
  - description: Project management and member assignments
    name: Projects
  - description: SSH key pair generation and management for remote server access
    name: SSH Keys
  - description: Codebase structural analysis and mapping
    name: Codemaps
  - description: AI-generated codebase documentation and security analysis
    name: CodeWiki
  - description: Captured HTTP traffic query and replay
    name: Network Events
paths:
  /api/v1/teams/invitations/accept:
    post:
      tags:
        - Teams
      summary: Accept invitation
      description: Accept a pending team invitation.
      operationId: post-v1-teams-invitations-accept
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AcceptInvitationRequest'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AcceptInvitationResponse'
          description: Invitation accepted
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Unauthorized
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Invitation not found
      security:
        - BearerAuth: []
        - ApiKeyAuth: []
components:
  schemas:
    AcceptInvitationRequest:
      properties:
        invite_token:
          description: Secure invitation token received in the invite email
          minLength: 1
          type: string
      required:
        - invite_token
      type: object
    AcceptInvitationResponse:
      properties:
        member:
          $ref: '#/components/schemas/TeamMember'
        team:
          $ref: '#/components/schemas/Team'
      required:
        - team
        - member
      type: object
    ErrorResponse:
      properties:
        code:
          description: >
            Stable machine-readable error code — branch on this rather than

            matching the human `error`/`message` strings. Domain codes include

            `user_spending_cap_reached`, `project_spending_cap_reached`, and

            `insufficient_neo_credits`; otherwise it mirrors the error kind

            (e.g. `forbidden`, `invalid_request`, `not_exists`,
            `already_exists`).
          example: user_spending_cap_reached
          type: string
        error:
          example: Bad request
          type: string
        error_id:
          description: Correlation id for a specific error instance, when present.
          type: string
        kind:
          description: Coarse error category (e.g. "forbidden request", "invalid request").
          example: forbidden request
          type: string
        message:
          description: |
            Human-readable detail (the kind prefixed to the error). For display,
            not for branching.
          type: string
      required:
        - error
      type: object
    TeamMember:
      properties:
        accepted_at:
          description: When the invitation was accepted
          format: date-time
          nullable: true
          type: string
        billable:
          description: >-
            Whether this member consumes a paid subscription seat. false =
            non-premium (no seat, no credit access).
          type: boolean
        cap:
          allOf:
            - $ref: '#/components/schemas/SpendingCapStatus'
          description: >-
            Effective spending-cap status (source/limit/used/remaining). Null
            when the team isn't on a spend-controls plan. RBAC: admins see every
            member's cap; a non-admin sees their own and null for other members.
          nullable: true
        created_at:
          description: When the team member record was created
          format: date-time
          type: string
        email:
          description: Member email
          format: email
          type: string
        id:
          description: Member ID
          format: uuid
          type: string
        invited_at:
          description: When the invitation was sent
          format: date-time
          type: string
        invited_by:
          description: >-
            Email of the user who invited this member (null if inviter was
            deleted)
          format: email
          nullable: true
          type: string
        project_access:
          $ref: '#/components/schemas/ProjectAccess'
        role:
          $ref: '#/components/schemas/TeamMemberRole'
        status:
          $ref: '#/components/schemas/TeamMemberStatus'
        updated_at:
          description: When the team member record was last updated
          format: date-time
          type: string
      required:
        - id
        - email
        - role
        - status
        - invited_at
      type: object
    Team:
      properties:
        auto_join_enabled:
          description: Whether auto-join is enabled for users with matching email domain
          type: boolean
        created_at:
          format: date-time
          type: string
        default_spending_cap_usd:
          description: >-
            Team-wide default spending cap in USD applied to members without an
            explicit override. Null if unset. Admin-only — scrubbed (null) for
            non-admin callers. Written via PATCH /teams/default-spending-cap.
          format: float
          nullable: true
          type: number
        id:
          description: Team ID (short UUID)
          type: string
        is_domain_verified:
          description: >-
            Whether the team domain is a verified non-public domain (e.g.,
            company domain like projectdiscovery.io). False for public email
            providers like gmail.com, yahoo.com
          type: boolean
        max_members:
          description: Maximum allowed members
          minimum: 1
          type: integer
        member_count:
          description: Current number of members (accepted and auto_joined)
          minimum: 0
          type: integer
        name:
          description: Team name
          maxLength: 128
          minLength: 1
          type: string
        updated_at:
          format: date-time
          type: string
        webhook_secret_name:
          description: >-
            Name of a team owner secret used as a Bearer token when calling the
            webhook.
          nullable: true
          type: string
        webhook_url:
          description: Webhook URL for webhook-mode task completion notifications.
          format: uri
          nullable: true
          type: string
      required:
        - id
        - name
        - member_count
        - max_members
        - created_at
        - updated_at
      type: object
    SpendingCapStatus:
      properties:
        limit:
          description: Effective cap in USD. null when source is "none".
          format: float
          nullable: true
          type: number
        remaining:
          description: limit − used, clamped ≥ 0. null when source is "none".
          format: float
          nullable: true
          type: number
        source:
          description: >-
            What the effective limit comes from — an explicit per-member
            override, the team-wide default, or none (bounded only by the team
            pool / not on a spend-controls plan).
          enum:
            - override
            - global_default
            - none
          type: string
        used:
          description: USD spent in the current cap window.
          format: float
          type: number
      required:
        - source
      type: object
    ProjectAccess:
      description: >-
        Project access scope for a team member. 'all' grants access to every
        shared team project, current and future. 'restricted' grants access only
        to projects the member is explicitly added to. Admins always have 'all'
        access.
      enum:
        - all
        - restricted
      type: string
    TeamMemberRole:
      description: >-
        Role of a team member (admin=full access, member=write access,
        viewer=read-only)
      enum:
        - admin
        - member
        - viewer
      type: string
    TeamMemberStatus:
      description: >-
        Status of a team member (pending=invited, accepted=accepted invite,
        auto_joined=joined via domain auto-join)
      enum:
        - pending
        - accepted
        - auto_joined
      type: string
  securitySchemes:
    BearerAuth:
      bearerFormat: JWT
      description: JWT authentication token
      scheme: bearer
      type: http
    ApiKeyAuth:
      description: Neo API key (neo_sk_* prefix)
      in: header
      name: X-Api-Key
      type: apiKey

````