Edit a role
Rename a role, change its description, or set what it grants. Everyone holding it gains or loses those capabilities wherever they hold it; its review says who loses what, and it waits for a go-ahead. Can be undone (access.undoRoleChange). Admins only.
bearerAuthorizationBearer <API key or OAuth token>An organization API key (ink_live_…, ADR-0124), or the OAuth access token a person's AI client gets from the Recruiter MCP sign-in. Only the Authorization header is accepted.
Idempotency-Key?stringMakes a write safe to repeat: the same key and input return the first result. Required for agents' writes and for anything a person confirms.
^[A-Za-z0-9._:-]+$8 <= length <= 128application/json- body
input*confirmation?stringThe id from a confirm or awaiting_approval Outcome, sent with the same input and key to go ahead.
Done. A replay of the same key and input omits output.
application/json- response
status*unknownoutput?actionId*stringcurl -X POST 'https://www.invyte.ai/api/recruiter/v1/operations/access.updateRole' \ -H 'Content-Type: application/json' \ -d '{ "input": { "roleId": "string" }}'{ "status": "done", "output": { "roleId": "string" }, "actionId": "string"}Undo a role change POST
Undo a role's latest change: an edit or restore puts the role back as it was, a delete brings the role back with the assignments that still apply, and a create deletes a role nobody holds yet. An undo can't itself be undone, and it can take access away, so it waits for a go-ahead. Admins only.
List invitations POST
List invitations to join the organization, newest first, 100 a page (`nextCursor` for more): who, when, and whether each is pending, accepted, expired or revoked. Admins only.