List user invitations, or look one up by hash
Visible to any authenticated user; the registration hash is never included in list responses. When the hash query parameter is supplied, the endpoint instead returns the single invitation matching that exact hash (available without authentication, so an invitee can view the invitation before accepting; 404 once accepted) — this is the only response that includes the hash.
Query Parameters
- Type: stringhash
Exact registration hash; returns the single matching, not-yet-accepted invitation including its hash
- Type: stringfilter
Filter expression to narrow results. Format:
field operator value. Multiple conditions are joined with;or&(AND) or|(OR). Conditions can be grouped with parentheses. Supported operators:=(equals; also matches NULL when value is empty),!=(not equals),>,>=,<,<=,~(LIKE, use%as wildcard; empty value matches NULL/empty),!~(NOT LIKE),...(IN set, comma-separated:statusId...1,2,3). OR across values for one field:status=(active|pending). Examples:filter=name=Acme,filter=created>=2024-01-01;assigneeId=,filter=name~%smith%;statusId...1,2,3,filter=(status=active|status=pending)&spaceId=5. - Type: integeroffsetmin:0
Zero-based index of the first record to return. Use together with
limitfor pagination. Example:offset=20&limit=10returns records 21–30. - Type: integerlimitmin:1
Maximum number of records to return. Use together with
offsetfor pagination. - Type: stringorder
Sort order for results. Comma-separated list of
field;DIRECTIONpairs. Direction isASCorDESC(defaultDESCwhen omitted). Example:order=name;ASCororder=id;ASC,name;DESC.
Responses
- application/json
- application/json
- application/json
- application/json
- application/json
- application/json
curl https://test.boost.space/api/user/invitation \
--header 'Authorization: Bearer YOUR_SECRET_TOKEN'
[
{
"id": 42,
"email": "user@example.com",
"role": "user",
"hash": "string",
"created": "2026-01-15T09:30:00Z",
"accepted": 1,
"teams": [
1
],
"categories": [
1
]
}
]