Management API
Members
List members, change their role or remove them.
Roles are viewer, developer, admin and owner, per organization. Admins change roles and remove members; granting, changing or removing the owner role needs an owner, and an organization always keeps at least one owner.
Any member can remove themselves (leave the organization).
Operations
| Operation | Request | Who may call it |
|---|---|---|
| listMembers | GET /api/orgs/{org}/members | viewer or above |
| updateMember | PATCH /api/orgs/{org}/members/{userId} | admin or above; owner for the owner role |
| removeMember | DELETE /api/orgs/{org}/members/{userId} | viewer or above for yourself; admin or above for others |
Management API requests carry a user token and are checked against the caller’s organization role. Delivery API requests carry an SDK key; the two never cross. Errors are always { error: { code, message } }.