---
title: "List the workspace's active invites"
description: "Owner/admin only (RPC-gated, INSUFFICIENT_PRIVILEGE 403 for member-role callers)."
api_method: GET
api_path: "/v1/workspaces/{workspaceId}/invites"
canonical_url: https://wiblo.app/docs/developers/api/invites/list-member-invites
last_updated: 2026-07-28T17:31:44+02:00
md_url: https://wiblo.app/docs/developers/api/invites/list-member-invites.md
---

# List the workspace's active invites

`GET /v1/workspaces/{workspaceId}/invites`

Owner/admin only (RPC-gated, `INSUFFICIENT_PRIVILEGE` 403 for member-role callers). Returns active (not revoked, not accepted) invites with a derived `pending`/`expired` status, the target member's name, and inviter attribution. The token hash never leaves the database and the raw token is never re-shown — rotate to get a fresh link. Per-user rate-limited at 60/60s.

## Path parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `workspaceId` | `string` | Yes |  |

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/workspaces/{workspaceId}/invites \
  -H "Authorization: Bearer $WIBLO_TOKEN"
```

**TypeScript**

```ts
import { createSdk, listMemberInvites } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await listMemberInvites({
  client: sdk,
  path: { workspaceId: "..." },
})
```

## Responses

**`200`** — Active invites, newest first. Returns `MemberInviteListResponse`.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `data` | `array<MemberInviteSummary>` | Yes |  |

**`401`** — No valid Supabase session cookie was present. Returns `ApiErrorEnvelope`.

**`403`** — Caller's live role is not owner/admin (`INSUFFICIENT_PRIVILEGE`). Returns `ApiErrorEnvelope`.

**`404`** — Caller has no active membership in the workspace, or the workspace does not exist (`WORKSPACE_NOT_FOUND`). Returns `ApiErrorEnvelope`.

**`422`** — Path param failed UUID validation (`INVALID_PARAMS`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.

### The MemberInviteSummary object

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes |  |
| `member_id` | `string` | Yes |  |
| `member_name` | `string` | Yes |  |
| `email` | `string \| null` | Yes |  |
| `token_prefix` | `string` | Yes |  |
| `status` | `"pending" \| "expired"` | Yes |  |
| `expires_at` | `string` | Yes |  |
| `created_at` | `string` | Yes |  |
| `created_by_member_id` | `string \| null` | Yes |  |
| `created_by_name` | `string \| null` | Yes |  |