API reference
Team Accounts API
Public developer Team Accounts API for listing members, creating/revoking invitations, accepting invitations, updating members, removing members, listing roles, and reading audit events.
SoundSync
Endpoints
Current workspace membership, invitation, role, and audit routes. Product scope and sensitive-operation permissions are checked server-side.
| Method | Path | Permission | Returns or side effect |
|---|---|---|---|
| GET | /api/developer/team | team.view | Workspace, current access, members, pending invitations, roles |
| GET | /api/developer/team/members | team.view | Team members only |
| GET | /api/developer/team/invitations | team.view | Pending invitations only |
| POST | /api/developer/team/invitations | team.invite | Creates one-time expiring email invitation; stores token hash only |
| DELETE | /api/developer/team/invitations/:invitationId | team.invite | Revokes pending invitation |
| POST | /api/developer/team/invitations/accept | authenticated invited email | Accepts one-time token and creates membership |
| PATCH | /api/developer/team/members/:memberId | team.manage_roles | Changes role and product scope with owner/last-owner protections |
| DELETE | /api/developer/team/members/:memberId | team.remove | Revokes membership without deleting the user account |
| GET | /api/developer/team/roles | authenticated developer | Returns canonical role and permission registry |
| GET | /api/developer/team/audit | team.audit.view | Returns team audit events without sensitive tokens |
Rate limits
Invitation creation, invitation acceptance, member mutation, and audit access are protected by developer team rate limit buckets.