DebugBundle

List, invite, update, and remove project collaborators via the DebugBundle REST API.

Manage access for one project at a time. These endpoints require browser-session or member-token authentication and re-check access against the target project on every request.

Project member operations are also available via the CLI (debugbundle project members list/invites/invite/cancel-invite/update-role/remove --project-id <id>) and MCP tools (list_project_members, list_project_member_invites, invite_project_member, cancel_project_member_invite, update_project_member_role, remove_project_member).

List Members

GET /v1/projects/{id}/members

curl https://api.debugbundle.com/v1/projects/proj_01HABCDE.../members \
  -H "Authorization: Bearer dbundle_mem_a1b2c3d4..."

List Pending Invites

GET /v1/projects/{id}/invites

curl https://api.debugbundle.com/v1/projects/proj_01HABCDE.../invites \
  -H "Authorization: Bearer dbundle_mem_a1b2c3d4..."

Invite Collaborator

POST /v1/projects/{id}/invite

curl -X POST https://api.debugbundle.com/v1/projects/proj_01HABCDE.../invite \
  -H "Authorization: Bearer dbundle_mem_a1b2c3d4..." \
  -H "Content-Type: application/json" \
  -d '{
    "email": "carol@example.com",
    "role": "member"
  }'

Field	Type	Required	Description
`email`	`string`	Yes	Email address for the invitation.
`role`	`string`	No	Project role to assign: `admin` or `member`. Default: `member`.

Invitations expire after 7 days. The invited user receives an email link for /invite?token=... and must sign in with the invited email address before accepting.

Cancel Invite

DELETE /v1/projects/{id}/invites/{inviteId}

curl -X DELETE https://api.debugbundle.com/v1/projects/proj_01HABCDE.../invites/pinv_01HKLMNO... \
  -H "Authorization: Bearer dbundle_mem_a1b2c3d4..."

Update Member Role

PATCH /v1/projects/{id}/members/{userId}

curl -X PATCH https://api.debugbundle.com/v1/projects/proj_01HABCDE.../members/usr_01HFGHIJ... \
  -H "Authorization: Bearer dbundle_mem_a1b2c3d4..." \
  -H "Content-Type: application/json" \
  -d '{
    "role": "admin"
  }'

Remove Member

DELETE /v1/projects/{id}/members/{userId}

curl -X DELETE https://api.debugbundle.com/v1/projects/proj_01HABCDE.../members/usr_01HFGHIJ... \
  -H "Authorization: Bearer dbundle_mem_a1b2c3d4..."

Errors

Status	Code	Description
400	`invalid_payload`	Missing or invalid request body.
400	`invalid_project_id`	Project ID is malformed.
400	`invalid_invite_id`	Invite ID is malformed.
400	`invalid_member_id`	Member user ID is malformed.
403	`forbidden`	Caller cannot manage members for this project.
403	`upgrade_required`	Project owner's plan does not support project sharing.
403	`email_verification_required`	Browser-session caller must verify email first.
404	`project_not_found`	Project is missing or inaccessible.
404	`invite_not_found`	No pending invite with this ID.
404	`member_not_found`	No project member with this user ID.
409	`member_already_exists`	User already has access to this project.
409	`invite_already_exists`	A pending invite for this email already exists.

Project Members API