# List Invitations

> Invitations that have not been accepted, newest first.

Requires an API key with the `read` scope.

The user who created the key must be an owner or admin. Expired invitations are included; compare `expiresAt`. The invite link is never returned.

## Response

Returns the invitations in `data`.

<RequestExample>
```bash cURL
curl -X GET "https://api.foxreach.io/api/v1/workspace/invites" \
  -H "X-API-Key: otr_your_key"
```

```python Python SDK
from foxreach import FoxReach

client = FoxReach(api_key="otr_your_key")
invites = client.workspace.invites()
```

```typescript TypeScript SDK
import { FoxReach } from "foxreach";

const client = new FoxReach({ apiKey: "otr_your_key" });
const invites = await client.workspace.invites();
```

</RequestExample>

<ResponseExample>
```json
{ "data": [{ "id": "wsi_abc123", "email": "sam@example.com", "role": "member", "invitedBy": "usr_1", "expiresAt": "2026-11-11T09:30:00+00:00", "acceptedAt": null, "createdAt": "2026-11-04T09:30:00+00:00", "workspaceId": "ws_abc123", "workspaceName": "Acme", "invitedByName": "Alex Doe" }] }
```
</ResponseExample>

## Errors

| Status | Description |
|--------|-------------|
| `401` | Missing, invalid, revoked or expired API key |
| `403` | The user who created the key does not have the required role in this workspace (`insufficient_role`), or is no longer a member (`key_creator_not_member`) |

## Rate Limit

- **300 requests per minute, shared by every `read` call in your workspace.** Fixed 60-second window.
- Every response includes `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` (unix epoch seconds) and `X-RateLimit-Bucket` (`read`).
- A `429` response includes a `Retry-After` header (seconds until the bucket resets).

For client-side patterns, see [Rate Limiting](/rate-limiting).