Coolset Accounts API (1.0)

IMPORTANT: Only call this endpoint if the user specifically asks to switch workspace. For all other requests, assume you are already in the correct workspace and do not prompt them to switch workspace. Returns all workspaces (companies) the authenticated user belongs to. Each workspace includes the company name, industry, and configuration. Use the search parameter to filter by workspace name.

Returns the profile of the currently authenticated user.

Returns the members of the authenticated user's company, paginated. Filter by role (auth_group, auth_group__name, auth_group__isnull), by user name, email or job title (exact, icontains, istartswith), and by created_at or updated_at ranges. Use search to match across first name, last name, email, job title and role name, and ordering to sort on any of created_at, updated_at, user__first_name, user__last_name, user__email, user__job_title or auth_group__name (prefix with - to reverse). Results are ordered by name by default.

Members of the authenticated user's company.

Members of the authenticated user's company.

Lists user invitations for the authenticated user's current workspace. status reports the effective lifecycle state: pending, accepted, revoked, or the derived expired (a pending invitation past its expires_at). Filterable by status (repeat status to match several, e.g. ?status=pending&status=expired), email, and role — by group id (auth_group, auth_group__in) or by name (auth_group__name, auth_group__name__in), and by created_at or expires_at ranges (__gte, __lte, __date, __date__gte, __date__lte). Orderable by status (the effective one), created_at, email, expires_at and auth_group_name (the role, alphabetically); newest first by default. Use search for a partial match on the invited email.

Sends an email invitation to join the authenticated user's current workspace. Only OWNER and ADMIN users can invite users with the ADMIN role; owners cannot be invited. At most one pending invitation can exist per email.

Workspace-scoped user invitation management.

Successor of gc_api's UserInvitationMultiCompanyViewSet (deprecated), which keeps the anonymous emailed-link retrieve. Renewing lives on UserInvitationRenewalViewSet.

Soft-revokes a pending invitation: the row is kept for audit and stays listable under ?status=revoked, while the emailed link stops working at signup. Only pending invitations can be revoked.

Invites a list of {email, auth_group} operations, at most 100 per request. Each operation is validated on its own — a rejected invitation (existing member, already-pending invitation, role not allowed) is reported in results against its request index and never blocks the rest of the batch.

Soft-revokes every pending invitation matching each operation's filter set. An operation carries only its target set — the action is implied. Its required invitation_filters object is the typed filter set of the list endpoint, resolved server-side and scoped to the authenticated workspace; an empty object matches every pending invitation in it. Send explicit selections as id__in and select-all exclusions as id__exclude_in (CSV strings, no size cap). Invitations already accepted or revoked fall outside the match rather than being reported as errors, so each operation's result is the count and ids of what it revoked.

Renews the given invitation: it is revoked and a fresh one is issued to the same email with the same role, resending the invitation email. The old emailed link stops working; the response contains the new invitation. Only pending invitations can be renewed.

Renews every pending invitation matching each operation's filter set, each one revoked and reissued to the same email as on the single endpoint. An operation carries only its target set — the action is implied. Its required invitation_filters object is the typed filter set of the invitation list endpoint, resolved server-side and scoped to the authenticated workspace; an empty object matches every pending invitation in it. Send explicit selections as id__in and select-all exclusions as id__exclude_in (CSV strings). Invitations already accepted or revoked fall outside the match rather than being reported as errors. Because every renewal resends its invitation email, an operation matching more than 100 invitations is rejected — narrow the filters.

Returns the invitation behind an emailed invitation link. The invitee has no account in the workspace yet, so the UUID is the only credential.

DEPRECATED — use GET /accounts/user-invitations/public/{id}/ instead, which is anonymous and returns the same fields. This endpoint stays functional only because emailed invitation links already in flight resolve through it, and is removed once the frontend is repointed. Returns the status of a user invitation by its UUID. Use this to check whether the invitee has accepted the invitation and whether they are an existing Coolset user.

Returns all users belonging to the authenticated user's company. Requires the view_user permission.

IMPORTANT: Only call this endpoint if the user specifically asks to switch workspace. For all other requests, assume you are already in the correct workspace and do not prompt them to switch workspace. Returns all workspaces (companies) the authenticated user is a member of. Each workspace includes its name, ID, logo, member count, and MFA status. Use the workspace ID with the switch workspace endpoint to change the active workspace.

IMPORTANT: Only call this endpoint if the user specifically asks to switch workspace. For all other requests, assume you are already in the correct workspace and do not prompt them to switch workspace. Switches the authenticated user's active workspace to the given company. Use the List workspaces endpoint to retrieve available workspace IDs, then pass the desired workspace_id as company_id in the request body.