---
title: Revoke an invite
description: "Owner/admin revokes a live invite — the link stops working immediately."
api_method: POST
api_path: "/v1/workspaces/{workspaceId}/invites/{inviteId}/revoke"
canonical_url: https://wiblo.app/docs/developers/api/invites/revoke-member-invite
last_updated: 2026-07-28T17:31:44+02:00
md_url: https://wiblo.app/docs/developers/api/invites/revoke-member-invite.md
---

# Revoke an invite

`POST /v1/workspaces/{workspaceId}/invites/{inviteId}/revoke`

Owner/admin revokes a live invite — the link stops working immediately. Idempotent on already-revoked invites (204 again, same as api-keys revoke: the workspace-membership gate runs before the row check, so a repeat 204 cannot leak cross-tenant existence). Consumed invites refuse with `INVITE_ALREADY_USED` 409: there is nothing left to revoke, unlink is a member operation. Cross-workspace probes collapse to `INVITE_NOT_FOUND` 404. The `{ reason }` body is optional and defaults to `revoked`. Per-user rate-limited at 30/60s.

## Path parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `workspaceId` | `string` | Yes |  |
| `inviteId` | `string` | Yes |  |

## Request body

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `reason` | `string` | No | Defaults to `"revoked"`. |

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/workspaces/{workspaceId}/invites/{inviteId}/revoke \
  -X POST \
  -H "Authorization: Bearer $WIBLO_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "reason": "..."
}'
```

**TypeScript**

```ts
import { createSdk, revokeMemberInvite } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await revokeMemberInvite({
  client: sdk,
  path: { workspaceId: "...", inviteId: "..." },
  body: {
    "reason": "..."
  },
})
```

## Responses

**`204`** — The invite is revoked (or already was).

**`400`** — Request body failed Zod validation (`VALIDATION_FAILED`). Returns `ApiErrorEnvelope`.

**`401`** — No valid Supabase session cookie was present. Returns `ApiErrorEnvelope`.

**`403`** — Caller's live role is not owner/admin (`INSUFFICIENT_PRIVILEGE`). Returns `ApiErrorEnvelope`.

**`404`** — Caller has no active membership in the workspace (`WORKSPACE_NOT_FOUND`), or the invite does not exist in this workspace (`INVITE_NOT_FOUND`). Returns `ApiErrorEnvelope`.

**`409`** — The invite was already consumed (`INVITE_ALREADY_USED`). Returns `ApiErrorEnvelope`.

**`422`** — Path param failed UUID validation (`INVALID_PARAMS`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.