`accountants.inviteMany`

Invite up to 10 people from one accounting firm in one go. Each person has their own email, name, access level (preset) and end date; the firm name and message are shared. Returns which invitations were sent and which failed, each with its private join link. Administrator access is required. MCP calls also require accounting:admin; the web agent asks for approval before changing outside access. Direct API requests cannot perform these access-granting actions.

POST/api/v1/accounting/accountants.inviteMany

Permissions

accounting:readaccounting:writeaccounting:admin

Who can call it

admin

Retries

Idempotency key required

MCP

accounting_accountants_invite_many

Reaches outside Oatmilk

It emails people or calls another service.

Fields

firmstring
at most 200 characters
messagestring
at most 2000 characters
peoplearray of objectsRequired
1–10 items
idempotencyKeystringRequired
Any unique text you generate once per intended change, so a retried request only happens once. Send it as the Idempotency-Key header instead if you prefer; if you send both they must match.
8–150 characters

curl https://app.getoatmilk.com/api/v1/accounting/accountants.inviteMany \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "people": [
    {
      "email": "finance@example.com",
      "accessExpiresOn": "2026-09-30"
    }
  ]
}'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/accountants.inviteMany", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "people": [
      {
        "email": "finance@example.com",
        "accessExpiresOn": "2026-09-30"
      }
    ]
  }),
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os
import uuid

import requests

response = requests.post(
    "https://app.getoatmilk.com/api/v1/accounting/accountants.inviteMany",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "people": [
            {
                "email": "finance@example.com",
                "accessExpiresOn": "2026-09-30",
            },
        ],
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Response

{
  "data": { … }
}

Try it

Checks your input with this action’s real schema and answers like the API, with synthetic data. No key needed, and nothing changes.

Input

POST/api/v1/accounting/accountants.inviteMany

curl https://app.getoatmilk.com/api/v1/accounting/accountants.inviteMany \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "people": [
    {
      "email": "finance@example.com",
      "accessExpiresOn": "2026-09-30"
    }
  ]
}'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/accountants.inviteMany", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "people": [
      {
        "email": "finance@example.com",
        "accessExpiresOn": "2026-09-30"
      }
    ]
  }),
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os
import uuid

import requests

response = requests.post(
    "https://app.getoatmilk.com/api/v1/accounting/accountants.inviteMany",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "people": [
            {
                "email": "finance@example.com",
                "accessExpiresOn": "2026-09-30",
            },
        ],
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Fields

Fields inside people

Example

Try it