REST API · members

GET /members

List the project's members — the owner plus every accepted member and pending invite. Owner-only (mirrors the MCP `list_members` tool and the panel's own members page; the roster leaks teammate emails so a viewer/editor token must not read it). Same `{members, count, seatCap, seatsUsed}` shape as MCP.

get_api_members_list

Authentication

• Bearer

Responses

200

The project's member roster.

application/json

{
    "members": [
        {
            "id": null,
            "email": "owner@example.com",
            "name": "owner@example.com",
            "role": "owner",
            "accepted": true
        },
        {
            "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
            "email": "teammate@example.com",
            "name": "teammate@example.com",
            "role": "editor",
            "accepted": true
        }
    ],
    "count": 2,
    "seatCap": 5,
    "seatsUsed": 2
}

403

Restricted to the project owner.

application/json

{
    "required": [
        "error"
    ],
    "properties": {
        "error": {
            "description": "Machine-readable error code, e.g. \"not_found\", \"forbidden\", \"validation\".",
            "type": "string",
            "enum": [
                "bad_request",
                "unauthorized",
                "insufficient_credits",
                "forbidden",
                "web_only",
                "allowlist_widens",
                "not_found",
                "conflict",
                "draft_revision_conflict",
                "rollback_confirmation_conflict",
                "not_replayable",
                "targets_outside_allowlist",
                "gone",
                "deprecated_operation",
                "validation",
                "rate_limited",
                "payment_provider",
                "verification_unavailable",
                "analytics_unavailable",
                "credential_vault_unavailable",
                "notification_grants_unavailable"
            ]
        },
        "message": {
            "description": "Human-readable explanation of what went wrong. Absent on a field-level validation failure, where `fields` carries the detail instead.",
            "type": "string"
        },
        "object": {
            "description": "The resource the error concerns, when there is one.",
            "required": [
                "type",
                "id"
            ],
            "properties": {
                "type": {
                    "type": "string"
                },
                "id": {
                    "type": "string"
                }
            },
            "type": "object"
        },
        "action": {
            "description": "What to do next, naming the call or the panel page that does it. Absent when there is no corrective step.",
            "type": "string"
        },
        "fields": {
            "description": "Present when `error` is \"validation\" — one message per rejected field, keyed by the field name.",
            "type": "object",
            "additionalProperties": {
                "type": "string"
            }
        },
        "retry_after": {
            "description": "An RFC 3339 timestamp, the moment the request may be retried. Not every `rate_limited` refusal carries one.",
            "type": "string",
            "format": "date-time"
        }
    },
    "type": "object"
}