Workspace
Resend an invitation
Rotates the token (the previous link dies) and re-enqueues the e-mail. It bypasses the seat cap on purpose: the invitation’s seat is already counted, and charging again would make resend fail exactly in the full workspace, which is where it is most used.
This is what makes sendEmail: false recoverable — since only the hash is stored, without this route a caller who lost the response would have no way back.
OAuth required. A classic key (x-api-key) is refused: an x-api-key request has no user behind it, and allowing writes to the member list would turn any key of the workspace into a path to account takeover.