For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
13.5kProductPricingSign inStart free trialBook a demo
DocsAPIsSDKsEnterprise EdgeGuidesAcademyRelease notes
DocsAPIsSDKsEnterprise EdgeGuidesAcademyRelease notes
    • API overview
  • Client API
  • Frontend API
  • Admin API
      • GETValidate signup token
      • POSTAdd a user via a signup token
      • GETGet public signup tokens
      • POSTCreate a public signup token
      • GETRetrieve a token
      • PUTUpdate a public signup token

Unleash reduces the risk of releasing new features, drives innovation by streamlining the software release process, and increases revenue by optimizing end-user experience. While we serve the needs of the world's largest, most security-conscious organizations, we are also rated the “Easiest Feature Management system to use” by G2.

GitHubGitHubLinkedInLinkedInX (Twitter)X (Twitter)SlackSlackStack OverflowStack OverflowYouTubeYouTube

Server SDKs

  • Node.js
  • Java
  • Go
  • Rust
  • Ruby
  • Python
  • .NET
  • PHP
  • All SDKs

Frontend SDKs

  • JavaScript
  • React
  • Next.js
  • Vue
  • iOS
  • Android
  • Flutter

Feature Flag use cases

  • Secure, scalable feature flags
  • Rollbacks
  • FedRAMP, SOC2, ISO2700 compliance
  • Progressive or gradual rollouts
  • Trunk-based development
  • Software kill switches
  • A/B testing
  • Feature management
  • Canary releases

Product

  • Quickstart
  • Unleash architecture
  • Pricing
  • Product vision
  • Open live demo
  • Open source
  • Enterprise feature management platform
  • Unleash vs LaunchDarkly

Support

  • Help center
  • Status
  • Changelog
Made in a cosy atmosphere in the Nordic countries.Copyright © 2026 Unleash
LogoLogo
13.5kProductPricingSign inStart free trialBook a demo
Admin APIPublic signup tokens

Add a user via a signup token

||View as Markdown|
POST
https://app.unleash-instance.example.com/invite/:token/signup
POST
/invite/:token/signup
$curl -X POST https://app.unleash-instance.example.com/invite/token/signup \
> -H "Authorization: <apiKey>" \
> -H "Content-Type: application/json" \
> -d '{
> "email": "hunter@example.com",
> "name": "Hunter Burgan",
> "password": "hunter2"
>}'
1{
2 "id": 123,
3 "name": "User",
4 "email": "user@example.com",
5 "username": "hunter",
6 "imageUrl": "https://example.com/242x200.png",
7 "inviteLink": "http://localhost:4242/invite-link/some-secret",
8 "loginAttempts": 3,
9 "emailSent": false,
10 "rootRole": 1,
11 "seenAt": "2023-06-30T11:42:00.345Z",
12 "createdAt": "2023-06-30T11:41:00.123Z",
13 "accountType": "User",
14 "permissions": [
15 "string"
16 ],
17 "scimId": "01HTMEXAMPLESCIMID7SWWGHN6",
18 "seatType": "Regular",
19 "companyRole": "Developer",
20 "productUpdatesEmailConsent": false,
21 "activeSessions": 2,
22 "deletedSessions": 1
23}
Create a user with the viewer root role and link them to the provided signup token
Was this page helpful?
Previous

Get public signup tokens

Next
Built with

Authentication

Authorizationstring
API key needed to access this API
OR
AuthorizationBearer
API key needed to access this API, in Bearer token format

Path parameters

tokenstringRequired

Request

createInvitedUserSchema
emailstringRequired
The invited user's email address
namestringRequired
The user's name
passwordstringRequired
The user's password
usernamestringOptional
The user's username. Must be unique if provided.

Response

userSchema
idinteger
The user id
namestring or null
Name of the user
emailstring
Email of the user
usernamestring or null
A unique username for the user
imageUrlstring
URL used for the user profile image
inviteLinkstring
If the user is actively inviting other users, this is the link that can be shared with other users
loginAttemptsinteger>=0
How many unsuccessful attempts at logging in has the user made
emailSentboolean
Is the welcome email sent to the user or not
rootRoleinteger>=0

Which root role this user is assigned

seenAtstring or nullformat: "date-time"
The last time this user logged in
createdAtstringformat: "date-time"
The user was created at this time
accountTypeenum
A user is either an actual User or a Service Account
Allowed values:
permissionslist of strings
Deprecated
scimIdstring or null
The SCIM ID of the user, only present if managed by SCIM
seatTypestring or null
The seat type of this user
companyRolestring or null
The role of the user within the company.
productUpdatesEmailConsentboolean or null
Whether the user has consented to receive product update emails.
activeSessionsinteger or null
Count of active browser sessions for this user
deletedSessionsdouble
Experimental. The number of deleted browser sessions after last login

Errors

400
Bad Request Error
409
Conflict Error