API reference
Team Accounts API
Public developer Team Accounts API for listing members, creating/revoking invitations, accepting invitations, updating members, removing members, listing roles, and reading audit events.
POST /activateGET /validatePOST /deactivate
Product credentials
Activation request
Entitlement check
Device registration
Periodic validation
Deactivation when needed
SoundSync
Endpoints
These are implemented Phase 6 endpoints.
| Method | Path | Permission | Returns or side effect |
|---|---|---|---|
| GET | /api/developer/team | team.view | Workspace, current access, members, pending invitations, roles |
| GET | /api/developer/team/members | team.view | Team members only |
| GET | /api/developer/team/invitations | team.view | Pending invitations only |
| POST | /api/developer/team/invitations | team.invite | Creates one-time expiring email invitation; stores token hash only |
| DELETE | /api/developer/team/invitations/:invitationId | team.invite | Revokes pending invitation |
| POST | /api/developer/team/invitations/accept | authenticated invited email | Accepts one-time token and creates membership |
| PATCH | /api/developer/team/members/:memberId | team.manage_roles | Changes role and product scope with owner/last-owner protections |
| DELETE | /api/developer/team/members/:memberId | team.remove | Revokes membership without deleting the user account |
| GET | /api/developer/team/roles | authenticated developer | Returns canonical role and permission registry |
| GET | /api/developer/team/audit | team.audit.view | Returns team audit events without sensitive tokens |
Rate limits
Invitation creation, invitation acceptance, member mutation, and audit access are protected by developer team rate limit buckets.
API reference
Endpoint groups are organized by authentication model, product scope, request shape, response shape, errors, idempotency, and integration surface.
Team Accounts API
/docs/api/team-accounts
Boundary page: developer team API is not verified.