> ## Documentation Index
> Fetch the complete documentation index at: https://docs.reconlayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create or upsert a workspace member access assignment



## OpenAPI

````yaml post /v1/member-access
openapi: 3.1.0
info:
  title: ReconLayer API
  version: 0.1.0
  summary: API-first reconciliation platform with dashboard-optional integration.
  description: >
    ReconLayer is designed to work headlessly.


    The dashboard is one consumer of this API, not the platform boundary.


    Organization resolution currently uses the `x-organization-id` header for
    development.

    In production, the intended model is:


    - dashboard requests authenticate through Clerk and the backend resolves the
    organization from the session

    - headless clients authenticate with API keys mapped to an organization

    - each API key can carry scopes for read/write/export/admin permissions


    Client write endpoints also use request-level idempotency.

    The client must generate an `Idempotency-Key` before the first attempt and

    reuse the same key on every retry of that same request.


    The route structure mirrors the domain:


    - `payment-intents` for expected payments

    - `reconciliation-cases` for reconciliation truth and workflow

    - `webhooks` for provider callbacks

    - `outbound-webhook-*` for client callback subscriptions and delivery
    tracking
servers:
  - url: https://api.reconlayer.com
security: []
tags:
  - name: dashboard
  - name: health
  - name: imports
  - name: outbound-webhooks
  - name: payment-intents
  - name: reconciliation-cases
  - name: integrations
  - name: settings
  - name: webhooks
paths:
  /v1/member-access:
    post:
      tags:
        - settings
      summary: Create or upsert a workspace member access assignment
      parameters:
        - schema:
            type: string
            minLength: 1
          in: header
          name: authorization
          required: false
        - schema:
            type: string
            minLength: 1
          in: header
          name: x-organization-id
          required: false
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  format: email
                  pattern: >-
                    ^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
                clerkUserId:
                  anyOf:
                    - type: string
                      minLength: 1
                    - type: 'null'
                roleId:
                  type: string
                  enum:
                    - admin
                    - operations
                    - read_only
                status:
                  type: string
                  enum:
                    - pending
                    - active
                invitedByUserId:
                  anyOf:
                    - type: string
                      minLength: 1
                    - type: 'null'
              required:
                - email
                - roleId
                - status
              additionalProperties: false
      responses:
        '200':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  roles:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                          enum:
                            - admin
                            - operations
                            - read_only
                        name:
                          type: string
                          minLength: 1
                        description:
                          anyOf:
                            - type: string
                            - type: 'null'
                        locked:
                          type: boolean
                        permissions:
                          type: object
                          properties: {}
                          additionalProperties:
                            type: boolean
                        createdAt:
                          type: string
                          format: date-time
                          pattern: >-
                            ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                        updatedAt:
                          type: string
                          format: date-time
                          pattern: >-
                            ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                      required:
                        - id
                        - name
                        - description
                        - locked
                        - permissions
                        - createdAt
                        - updatedAt
                      additionalProperties: false
                  assignments:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                          minLength: 1
                        email:
                          type: string
                          format: email
                          pattern: >-
                            ^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
                        clerkUserId:
                          anyOf:
                            - type: string
                              minLength: 1
                            - type: 'null'
                        roleId:
                          type: string
                          enum:
                            - admin
                            - operations
                            - read_only
                        status:
                          type: string
                          enum:
                            - pending
                            - active
                        invitedByUserId:
                          anyOf:
                            - type: string
                              minLength: 1
                            - type: 'null'
                        activatedAt:
                          anyOf:
                            - type: string
                              format: date-time
                              pattern: >-
                                ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                            - type: 'null'
                        createdAt:
                          type: string
                          format: date-time
                          pattern: >-
                            ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                        updatedAt:
                          type: string
                          format: date-time
                          pattern: >-
                            ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                      required:
                        - id
                        - email
                        - clerkUserId
                        - roleId
                        - status
                        - invitedByUserId
                        - activatedAt
                        - createdAt
                        - updatedAt
                      additionalProperties: false
                required:
                  - roles
                  - assignments
                additionalProperties: false
        '400':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true

````