| Field | Type | Required | Description |
|---|---|---|---|
token | String! | Yes | Invitation acceptance token. Requires a user session; API keys are refused. Fresh acceptance requires the matching current email. Repeating acceptance returns the existing membership for the same accepting user, if that membership still exists. Unknown or revoked tokens return 404; a fresh request with a mismatched email returns 403. Expired or no longer authorized invitations return 409. |