Coolset Accounts API (1.0)

Returns the profile of the currently authenticated user.

IMPORTANT: Only call this endpoint if the user specifically asks to switch workspace. For all other requests, assume you are already in the correct workspace and do not prompt them to switch workspace. Returns all workspaces (companies) the authenticated user belongs to. Each workspace includes the company name, industry, and configuration. Use the search parameter to filter by workspace name.

IMPORTANT: Only call this endpoint if the user specifically asks to switch workspace. For all other requests, assume you are already in the correct workspace and do not prompt them to switch workspace. Switches the authenticated user's active workspace to the given company. Use the List workspaces endpoint to retrieve available workspace IDs, then pass the desired workspace_id as company_id in the request body.

Returns the members of the authenticated user's company, paginated. Filter by role (auth_group, auth_group__name, auth_group__isnull), by user name, email or job title (exact, icontains, istartswith), and by created_at or updated_at ranges. Use search to match across first name, last name, email, job title and role name, and ordering to sort on any of created_at, updated_at, user__first_name, user__last_name, user__email, user__job_title or auth_group__name (prefix with - to reverse). Results are ordered by name by default.

Changes the role (auth_group) of a member of the authenticated user's company. The role is the only field that can be changed, and it cannot be cleared. Owners can change any member's role; Admins can change non-Owner members to any role except Owner; Editors and Viewers cannot change roles. Handing over the Owner role demotes the current Owner to Admin.

Removes a member from the authenticated user's company. Owners can remove any member and Admins any member except the Owner; Editors and Viewers cannot remove others. Any member except the Owner can remove themselves to leave the workspace — the Owner must hand over ownership first.

Lists user invitations for the authenticated user's current workspace. status reports the effective lifecycle state: pending, accepted, revoked, or the derived expired (a pending invitation past its expires_at). Filterable by status (repeat status to match several, e.g. ?status=pending&status=expired), email, and role — by group id (auth_group, auth_group__in) or by name (auth_group__name, auth_group__name__in), and by created_at or expires_at ranges (__gte, __lte, __date, __date__gte, __date__lte). Orderable by status (the effective one), created_at, email, expires_at and auth_group_name (the role, alphabetically); newest first by default. Use search for a partial match on the invited email.

Sends an email invitation to join the authenticated user's current workspace. Only OWNER and ADMIN users can invite users with the ADMIN role; owners cannot be invited. At most one pending invitation can exist per email.

Workspace-scoped user invitation management.

Successor of gc_api's UserInvitationMultiCompanyViewSet (deprecated), which keeps the anonymous emailed-link retrieve. Renewing lives on UserInvitationRenewalViewSet.

Soft-revokes a pending invitation: the row is kept for audit and stays listable under ?status=revoked, while the emailed link stops working at signup. Only pending invitations can be revoked.

Invites a list of {email, auth_group} operations, at most 100 per request. Each operation is validated on its own — a rejected invitation (existing member, already-pending invitation, role not allowed) is reported in results against its request index and never blocks the rest of the batch.

Soft-revokes every pending invitation matching each operation's filter set. An operation carries only its target set — the action is implied. Its required invitation_filters object is the typed filter set of the list endpoint, resolved server-side and scoped to the authenticated workspace; an empty object matches every pending invitation in it. Send explicit selections as id__in and select-all exclusions as id__exclude_in (CSV strings, no size cap). Invitations already accepted or revoked fall outside the match rather than being reported as errors, so each operation's result is the count and ids of what it revoked.

Renews the given invitation: it is revoked and a fresh one is issued to the same email with the same role, resending the invitation email. The old emailed link stops working; the response contains the new invitation. Only pending invitations can be renewed.

Renews every pending invitation matching each operation's filter set, each one revoked and reissued to the same email as on the single endpoint. An operation carries only its target set — the action is implied. Its required invitation_filters object is the typed filter set of the invitation list endpoint, resolved server-side and scoped to the authenticated workspace; an empty object matches every pending invitation in it. Send explicit selections as id__in and select-all exclusions as id__exclude_in (CSV strings). Invitations already accepted or revoked fall outside the match rather than being reported as errors. Because every renewal resends its invitation email, an operation matching more than 100 invitations is rejected — narrow the filters.

Returns the invitation behind an emailed invitation link. The invitee has no account in the workspace yet, so the UUID is the only credential.