Team Management

Collaborate with your team by inviting members to your workspace. Each member is assigned a role that determines their permissions.

RolesCopy Anchor Link

Role PermissionsCopy Anchor Link

Member is not read-only and not excluded from key management: it can create and edit almost everything. Only deleting API keys, domains and webhooks, plus team/ownership administration, is Admin-only.

Team OverviewCopy Anchor Link

Get the current team members and pending invitations:

GET https://api.mail.land/v1/account/team

curl https://api.mail.land/v1/account/team \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

{
  "members": [
    {
      "publicId": "mbr_a1b2c3d4e5",
      "email": "[email protected]",
      "fullName": "John Doe",
      "role": "owner",
      "status": "active",
      "joinedAt": "2026-01-15T08:00:00Z",
      "invitedByEmail": null,
      "isCurrentUser": true
    },
    {
      "publicId": "mbr_f6g7h8i9j0",
      "email": "[email protected]",
      "fullName": "Jane Smith",
      "role": "admin",
      "status": "active",
      "joinedAt": "2026-01-20T10:00:00Z",
      "invitedByEmail": "[email protected]",
      "isCurrentUser": false
    }
  ],
  "pendingInvitations": [
    {
      "publicId": "inv_k1l2m3n4o5",
      "email": "[email protected]",
      "role": "member",
      "status": "pending",
      "createdAt": "2026-02-17T08:00:00Z",
      "expiresAt": "2026-02-24T08:00:00Z",
      "invitedByEmail": "[email protected]",
      "invitedByName": "John Doe",
      "isExpired": false
    }
  ],
  "totalMembers": 2,
  "totalPendingInvitations": 1,
  "maxMembers": 10
}

There is no id, userId, firstName/lastName, roleName/statusName, invitedBy, memberCount or invitationCount in this response: use the field names above instead. maxMembers reflects the workspace's plan: 10 on Free and Pro, unlimited on Max. A seat is an active member (the owner included) or a pending, unexpired invitation; suspended members and expired, revoked or accepted invitations don't count. At the cap, inviting, accepting, reactivating or an SSO first login all return 400 PLAN_LIMIT_REACHED. Downgrading a plan never removes or suspends anyone: it only blocks new admissions while the workspace is over its new limit.

Member StatusesCopy Anchor Link

Invitation StatusesCopy Anchor Link

Returned as lowercase strings:

Invite a Team MemberCopy Anchor Link

POST https://api.mail.land/v1/account/team/invite

{
  "email": "[email protected]",
  "role": 2
}

curl -X POST https://api.mail.land/v1/account/team/invite \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..." \
  -H "Content-Type: application/json" \
  -d '{ "email": "[email protected]", "role": 2 }'

The invited user receives an email with a link to accept the invitation. Invitations expire after 7 days.

Accept an InvitationCopy Anchor Link

There is a single public route for accepting an invitation: it is not versioned (/v1 is not part of the path), and it is keyed by the invitation token, not an id:

POST https://api.mail.land/invitations/{token}/accept

For an existing MailLand user, sign in as the invited email address first, then call this route with an empty or minimal body, no firstName/lastName/password needed. For a brand-new user, provide fullName and password in the same call to create the account and accept in one step.

{
  "fullName": "New Member",
  "password": "SecureP@ssw0rd!"
}

curl -X POST https://api.mail.land/invitations/invitation-token-from-email/accept \
  -H "Content-Type: application/json" \
  -d '{"fullName": "New Member", "password": "SecureP@ssw0rd!"}'

Get Invitation InfoCopy Anchor Link

Retrieve invitation details before accepting (public, no auth required, keyed by token, not /v1):

GET https://api.mail.land/invitations/{token}

curl "https://api.mail.land/invitations/invitation-token-from-email"

{
  "tenantName": "My Company",
  "role": "member",
  "invitedByName": "John Doe",
  "expiresAt": "2026-02-24T08:00:00Z",
  "isExpired": false,
  "alreadyAccepted": false,
  "existingUserEmail": "[email protected]"
}

Manage InvitationsCopy Anchor Link

Cancel an InvitationCopy Anchor Link

DELETE https://api.mail.land/v1/account/team/invitations/{id}

curl -X DELETE https://api.mail.land/v1/account/team/invitations/{id} \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

Returns 204 No Content on success.

Resend an InvitationCopy Anchor Link

POST https://api.mail.land/v1/account/team/invitations/{id}/resend

curl -X POST https://api.mail.land/v1/account/team/invitations/{id}/resend \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

Resending an invitation resets the 7-day expiry.

Update a Member's RoleCopy Anchor Link

PATCH https://api.mail.land/v1/account/team/members/{id}/role

{
  "role": 1
}

curl -X PATCH https://api.mail.land/v1/account/team/members/{id}/role \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..." \
  -H "Content-Type: application/json" \
  -d '{ "role": 1 }'

Admins can only manage Member/Viewer roles: they cannot promote a member to Admin or change another Admin's role. Only the Owner can do that.

Suspend and UnsuspendCopy Anchor Link

Temporarily suspend a member's access:

POST https://api.mail.land/v1/account/team/members/{id}/suspend

A body { reason?, credentialDecision?, transferToMemberId? } controls what happens to that member's API keys while suspended. credentialDecision is only required when the member owns at least one live API key: omitting it in that case returns 400 CREDENTIAL_DECISION_REQUIRED, with the exposed keys listed in details. Otherwise the whole body may be omitted.

curl -X POST https://api.mail.land/v1/account/team/members/{id}/suspend \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

Restore a suspended member:

POST https://api.mail.land/v1/account/team/members/{id}/reactivate

curl -X POST https://api.mail.land/v1/account/team/members/{id}/reactivate \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

Suspended members cannot sign in to the workspace; their API keys follow the credential decision made at suspension time: with keep, the member's keys keep working.

Remove a MemberCopy Anchor Link

DELETE https://api.mail.land/v1/account/team/members/{id}

Removal accepts the same credential decision, as query parameters:

DELETE https://api.mail.land/v1/account/team/members/{id}?reason=offboarding&credentialDecision=revoke&transferToMemberId=mbr_f6g7h8i9j0

As with suspend, credentialDecision is required when the member owns a live API key and the call otherwise returns 400 CREDENTIAL_DECISION_REQUIRED.

curl -X DELETE https://api.mail.land/v1/account/team/members/{id} \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

Removes the member from the workspace. They lose access to all workspace resources immediately.

Transfer OwnershipCopy Anchor Link

Transfer workspace ownership to another member:

POST https://api.mail.land/v1/account/team/transfer-ownership

{
  "newOwnerMemberId": "mbr_f6g7h8i9j0"
}

curl -X POST https://api.mail.land/v1/account/team/transfer-ownership \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..." \
  -H "Content-Type: application/json" \
  -d '{ "newOwnerMemberId": "mbr_f6g7h8i9j0" }'

The target must be an active Admin (not a Member or Viewer).

Error ResponsesCopy Anchor Link

There is no MEMBER_ALREADY_EXISTS code: both "already a member" and "invitation already exists" return 409 CONFLICT.

POST /v1/account/team/leave (leave the workspace yourself) and GET /v1/account/team/me (your own membership record) also exist and are not documented elsewhere on this page.

Next StepsCopy Anchor Link

• Workspaces: manage workspace settings
• Authentication: authentication and sessions
• Billing: subscription and payment management