Authorizations
- Authorization string required header
Per-site API key (prefix: so_...). Each key is scoped to exactly one Sotion site — the site context is determined entirely by the key. No site ID is needed in any URL. Pass as: Authorization: Bearer so_...
Request Body
application/json- email string (email) required
Email address for the new member. Will be normalized to lowercase and trimmed. Must be unique per site.
- displayName string nullable
Optional display name for the member.
- paid boolean default
Whether to mark the member as a paying customer. Defaults to false. Default: false.
- accessGroupIds[] string (uuid) array
UUIDs of custom access groups to assign the member to during creation. Groups are assigned atomically. Scope-managed groups are not allowed and will return 403.
Response
application/json- Location string response header
URL of the created member.
- X-RateLimit-Limit integer response header
Maximum requests allowed in the current window.
- X-RateLimit-Remaining integer response header
Requests remaining in the current window.
- X-RateLimit-Reset integer response header
Unix timestamp (seconds) when the rate limit window resets.
- X-Request-Id string (uuid) response header
Unique request identifier for support and debugging.
- data allOf
+ - Show Child Attributes
- id string (uuid) allOf
Unique identifier (UUID) for the member.
- email string (email) allOf
Member's email address (normalized to lowercase).
- displayName string allOfnullable
Display name shown to the member, null if not set.
- status string enum allOfenum
'active' means the member can access the site. 'blocked' means the member is denied access. Allowed values: active, blocked.
- verified boolean allOfnullable
Whether the member has verified their email by clicking a login link. Null if unknown.
- paid boolean allOfnullable
Whether this member is marked as a paying customer. Set manually or via the API.
- registeredAt string (date-time) allOfnullable
When the member first registered (clicked a login link or was added).
- lastLoginAt string (date-time) allOfnullable
When the member last logged in via a login link.
- createdAt string (date-time) allOfnullable
When the member record was created.
- updatedAt string (date-time) allOfnullable
When the member record was last modified.
- accessGroups[] object allOfarray
List of access groups this member belongs to. Only included in getMember and createMember responses, NOT in listMembers.
+ - Show Child Attributes
- id string (uuid)
UUID of the access group.
- name string
Name of the access group.