---
title: Resolve an invite token for the public accept page
description: "Public, body-based POST (the raw token must never ride a URL path — response logs record the pathname)."
api_method: POST
api_path: "/v1/invites/resolve"
canonical_url: https://wiblo.app/docs/developers/api/invites/resolve-invite
last_updated: 2026-07-28T17:31:44+02:00
md_url: https://wiblo.app/docs/developers/api/invites/resolve-invite.md
---

# Resolve an invite token for the public accept page

`POST /v1/invites/resolve`

Public, body-based POST (the raw token must never ride a URL path — response logs record the pathname). Always answers 200 with a four-state shape: `pending` (full teaser: workspace, member, inviter, expiry), `expired` (workspace name only), `used` and `invalid` (no details — a revoked link answers exactly like garbage). Per-IP rate-limited at 60/60s as best-effort probe damping (the budget is sized for a shared egress IP); the 48-char base62 tokens are unguessable by construction.

## Request body

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `invite_token` | `string` | Yes |  |

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/invites/resolve \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{
  "invite_token": "..."
}'
```

**TypeScript**

```ts
import { createSdk, resolveInvite } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await resolveInvite({
  client: sdk,
  body: {
    "invite_token": "..."
  },
})
```

## Responses

**`200`** — The invite's public display state. Returns `ResolveInviteResponse`.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `status` | `"pending" \| "expired" \| "used" \| "invalid"` | Yes |  |
| `workspace_name` | `string \| null` | Yes |  |
| `member_name` | `string \| null` | Yes |  |
| `invited_by_name` | `string \| null` | Yes |  |
| `email` | `string \| null` | Yes |  |
| `expires_at` | `string \| null` | Yes |  |

**`400`** — Request body failed Zod validation (`VALIDATION_FAILED`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.