Membership

Organization member with user profile, assigned roles, and per-org activity timestamps. The embedded user's last_login_at and last_active_at are global (across all orgs); the top-level last_login_at and last_active_at on this resource are scoped to this specific org — nil if the user has never logged into or been active in this org. The status field reflects the membership lifecycle. When inactive, deactivated_at, deactivated_by, and deactivated_reason provide the audit trail for the deactivation.

object
Type: string

Resource type identifier
id
Type: string

User identifier
user
Type: object · User

User profile with identity and display metadata
- object
  Type: string
  
  Resource type identifier
- id
  Type: string
  
  Unique identifier for the user
- email
  Type: string
  
  User's email address
- first_name
  Type: string
  
  User's first name
- last_name
  Type: string
  
  User's last name
- avatar_url
  Type: string
  
  URL to user's avatar image
- mfa_enabled
  Type: boolean
  
  Whether MFA is enabled for this user
- created_at
  Type: string
  
  When the user was created
- updated_at
  Type: string
  
  When the user was last updated
- last_login_at
  Type: string
  
  When the user last successfully authenticated anywhere (global across all orgs; nil if never). For per-org login recency, see the membership resource's last_login_at.
- last_active_at
  Type: string
  
  When the user last made an authenticated request anywhere (global across all orgs; debounced ~1 minute, nil if never). For per-org activity recency, see the membership resource's last_active_at.
roles
Type: array object[] · Role[]

Roles assigned to this member
Role identity and display metadata
- object
  Type: string
  
  Resource type identifier
- id
  Type: string
  
  Unique identifier for the role
- name
  Type: string
  
  Role display name
- slug
  Type: string
  
  URL-safe role slug
- description
  Type: string
  
  Description of the role's purpose
- is_system
  Type: boolean
  
  Whether this is a system role (member, billing, admin, owner)
- created_at
  Type: string
  
  When the role was created
- updated_at
  Type: string
  
  When the role was last updated
joined_at
Type: string

When the membership was created
last_login_at
Type: string

When the user last successfully authenticated into this org (nil if never)
last_active_at
Type: string

When the user last made an authenticated request in this org (debounced ~1 minute, nil if never)
status
Type: string

Membership lifecycle status: "active" or "inactive"
deactivated_at
Type: string

When the membership was deactivated (nil when status is active)
deactivated_by
Type: object · User

User profile with identity and display metadata
- object
  Type: string
  
  Resource type identifier
- id
  Type: string
  
  Unique identifier for the user
- email
  Type: string
  
  User's email address
- first_name
  Type: string
  
  User's first name
- last_name
  Type: string
  
  User's last name
- avatar_url
  Type: string
  
  URL to user's avatar image
- mfa_enabled
  Type: boolean
  
  Whether MFA is enabled for this user
- created_at
  Type: string
  
  When the user was created
- updated_at
  Type: string
  
  When the user was last updated
- last_login_at
  Type: string
  
  When the user last successfully authenticated anywhere (global across all orgs; nil if never). For per-org login recency, see the membership resource's last_login_at.
- last_active_at
  Type: string
  
  When the user last made an authenticated request anywhere (global across all orgs; debounced ~1 minute, nil if never). For per-org activity recency, see the membership resource's last_active_at.
deactivated_reason
Type: string

Free-form note recorded at deactivation time (nil when status is active)