Synopsis
Description
Generates a one-time redeem code that grants<email> access to the current organization. Capy prompts you for a role (Member, Project Admin, or Admin) and offers to copy the code to your clipboard.
The recipient runs capy redeem <code> to complete the flow.
The redeem code
The code is a base64 string containing the invite tokenT, the organization ID, and an outer-wrapped copy of the master key. Deliver it out-of-band (Signal, a password manager share, a QR code, a phone call) - anyone who intercepts it plus the separately-held service wrap could recover the master key.
Email and Slack DMs are not acceptable channels. See Inviting users for why.
Example
See also
capy redeem- the other side of the flow- Roles - what each role can do
- Cryptography → Inviting a new member