Ask for an invitation
Menu

Endpoint

Remove a member or revoke an invitation

DELETE/v1/team/members/{id}

No API key changes the team: this call answers passkey_approval_required for every member and invitation. Members are removed in the dashboard by a signed-in member, with a passkey, which ends their sessions at once.

Scope a restricted key needs
team:write
Publishable key
Not allowed: secret or restricted key only
Idempotency-Key
Not used. A DELETE is already safe to repeat.

Parameters

Parameters of Remove a member or revoke an invitation
ParameterType and placeMeaning
idrequiredstringpathThe id of the member.
Orrerie-VersionstringheaderAPI version date. Default: the version the key was created with. Example 2026-10-11.

Example request

Refused in this release

Every request to this call is answered 403 with passkey_approval_required and reason members_dashboard_only. No API key changes the team: a signed-in member does it in the dashboard, with a passkey.

curl

curl -X DELETE https://api.orrerie.com/v1/team/members/mem_ceh1wpzdrpk13cnpcjy9w0fa \
  -H "Authorization: Bearer $ORRERIE_SECRET_KEY"

JavaScript

const response = await fetch("https://api.orrerie.com/v1/team/members/mem_ceh1wpzdrpk13cnpcjy9w0fa", {
  method: "DELETE",
  headers: {
    Authorization: `Bearer ${process.env.ORRERIE_SECRET_KEY}`,
  },
});
const result = await response.json();
if (!response.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
console.log(result);

Python

import os
import requests

response = requests.delete(
    "https://api.orrerie.com/v1/team/members/mem_ceh1wpzdrpk13cnpcjy9w0fa",
    headers={"Authorization": f"Bearer {os.environ['ORRERIE_SECRET_KEY']}"},
    timeout=30,
)
result = response.json()
if not response.ok:
    raise RuntimeError(f"{result['error']['code']}: {result['error']['message']}")
print(result)

PHP

<?php
$request = curl_init('https://api.orrerie.com/v1/team/members/mem_ceh1wpzdrpk13cnpcjy9w0fa');
curl_setopt_array($request, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'DELETE',
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('ORRERIE_SECRET_KEY'),
    ],
]);
$body = curl_exec($request);
if ($body === false) {
    throw new RuntimeException(curl_error($request));
}
$result = json_decode($body, true);
if (curl_getinfo($request, CURLINFO_HTTP_CODE) >= 400) {
    throw new RuntimeException($result['error']['code'] . ': ' . $result['error']['message']);
}
print_r($result);

Responses

200 OK

The answer is the member object. Headers: Orrerie-Request-Id.

Example response, 200

{
  "id": "mem_re2bmvrnbzsbefcwx64ftp5w",
  "object": "member",
  "deleted": true
}

Any other status: an error

A status of 400 or above answers with the error object. Branch on its code, never on its message.

Errors

Beside the errors every call can answer with (a bad key, a missing scope, the rate limit), this call answers with:

Errors of Remove a member or revoke an invitation
CodeHTTPMeaning
passkey_approval_required403The action can only be done by a signed-in member in the dashboard (settlement asset, key-holding roles, approvals). No API key can do it.