members

Change a member's permissions

Sets the permissions you send (snake_case: resources_list, resources_create, resources_edit, resources_delete, assistants_create, assistants_edit, assistants_delete, api, mcp), keeps the others, and replaces the member's assistants. Paid plans only: on the free plan every member may do everything. The change applies to the member's connections at once.

PATCH/v1/members/{user_id}

Request

curl --request PATCH \
  --url 'https://api.lookio.app/v1/members/<user_id>' \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '{
  "permissions": {
    "resources_list": true,
    "resources_create": true,
    "resources_edit": true,
    "resources_delete": true,
    "assistants_create": true,
    "assistants_edit": true,
    "assistants_delete": true,
    "api": true,
    "mcp": true
  },
  "assistant_ids": [
    "<string>"
  ]
}'

import json
import requests

url = "https://api.lookio.app/v1/members/<user_id>"
headers = {
  "Authorization": "<api-key>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"permissions\":{\"resources_list\":true,\"resources_create\":true,\"resources_edit\":true,\"resources_delete\":true,\"assistants_create\":true,\"assistants_edit\":true,\"assistants_delete\":true,\"api\":true,\"mcp\":true},\"assistant_ids\":[\"<string>\"]}")

response = requests.request("PATCH", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://api.lookio.app/v1/members/<user_id>", {
  method: "PATCH",
  headers: {
    "Authorization": "<api-key>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "permissions": {
      "resources_list": true,
      "resources_create": true,
      "resources_edit": true,
      "resources_delete": true,
      "assistants_create": true,
      "assistants_edit": true,
      "assistants_delete": true,
      "api": true,
      "mcp": true
    },
    "assistant_ids": [
      "<string>"
    ]
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://api.lookio.app/v1/members/<user_id>");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "PATCH");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: <api-key>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"permissions\":{\"resources_list\":true,\"resources_create\":true,\"resources_edit\":true,\"resources_delete\":true,\"assistants_create\":true,\"assistants_edit\":true,\"assistants_delete\":true,\"api\":true,\"mcp\":true},\"assistant_ids\":[\"<string>\"]}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("PATCH", "https://api.lookio.app/v1/members/<user_id>", bytes.NewBuffer([]byte("{\"permissions\":{\"resources_list\":true,\"resources_create\":true,\"resources_edit\":true,\"resources_delete\":true,\"assistants_create\":true,\"assistants_edit\":true,\"assistants_delete\":true,\"api\":true,\"mcp\":true},\"assistant_ids\":[\"<string>\"]}")))
  req.Header.Set("Authorization", "<api-key>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://api.lookio.app/v1/members/<user_id>"))
    .header("Authorization", "<api-key>")
    .header("Content-Type", "application/json")
    .method("PATCH", HttpRequest.BodyPublishers.ofString("{\"permissions\":{\"resources_list\":true,\"resources_create\":true,\"resources_edit\":true,\"resources_delete\":true,\"assistants_create\":true,\"assistants_edit\":true,\"assistants_delete\":true,\"api\":true,\"mcp\":true},\"assistant_ids\":[\"<string>\"]}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://api.lookio.app/v1/members/<user_id>")
request = Net::HTTP::Patch.new(uri)
request["Authorization"] = "<api-key>"
request["Content-Type"] = "application/json"
request.body = "{\"permissions\":{\"resources_list\":true,\"resources_create\":true,\"resources_edit\":true,\"resources_delete\":true,\"assistants_create\":true,\"assistants_edit\":true,\"assistants_delete\":true,\"api\":true,\"mcp\":true},\"assistant_ids\":[\"<string>\"]}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "user_id": "<string>",
    "email": null,
    "name": null,
    "role": "admin",
    "permissions": {
      "resources_list": true,
      "resources_create": true,
      "resources_edit": true,
      "resources_delete": true,
      "assistants_create": true,
      "assistants_edit": true,
      "assistants_delete": true,
      "api": true,
      "mcp": true
    },
    "assistant_ids": [
      "<string>"
    ]
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

Requires admin.

Workspace admins only, with a personal connection.

You send the permissions to change, in snake_case: resources_list, resources_create, resources_edit, resources_delete, assistants_create, assistants_edit, assistants_delete, api and mcp. The others are kept. assistant_ids always replaces the member’s list: send null for all assistants, including future ones. An unknown permission name fails with invalid_request.

Granular permissions need a paid plan. On the Free plan every member may do everything, and the call fails with feature_not_available. The change applies to the member’s API and MCP connections at once.

Authorizations

Authorizationbearerin headerrequired

Path parameters

user_idstringrequired

Body

application/jsonrequired

permissionsobjectrequired

Each permission to set. Missing ones are refused for members on the Pro plan.

Show child attributes

permissions.resources_listboolean

permissions.resources_createboolean

permissions.resources_editboolean

permissions.resources_deleteboolean

permissions.assistants_createboolean

permissions.assistants_editboolean

permissions.assistants_deleteboolean

permissions.apiboolean

permissions.mcpboolean

assistant_idsstring[] | nullrequired

The assistants this member may use; null for all, including future ones.

Response

application/json

Change a member's permissions

dataobjectrequired

Show child attributes

data.user_idstringrequired

data.emailstringnullrequired

data.namestringnullrequired

data.roleenum<string>requiredone of: admin, member

data.permissionsobjectrequired

Show child attributes

data.permissions.resources_listbooleanrequired

data.permissions.resources_createbooleanrequired

data.permissions.resources_editbooleanrequired

data.permissions.resources_deletebooleanrequired

data.permissions.assistants_createbooleanrequired

data.permissions.assistants_editbooleanrequired

data.permissions.assistants_deletebooleanrequired

data.permissions.apibooleanrequired

data.permissions.mcpbooleanrequired

data.assistant_idsstring[] | nullrequired

The assistants this member may use; null is all of them.

request_idstringrequired

curl --request PATCH \ --url 'https://api.lookio.app/v1/members/<user_id>' \ --header 'Authorization: <api-key>' \ --header 'Content-Type: application/json' \ --data '{ "permissions": { "resources_list": true, "resources_create": true, "resources_edit": true, "resources_delete": true, "assistants_create": true, "assistants_edit": true, "assistants_delete": true, "api": true, "mcp": true }, "assistant_ids": [ "<string>" ] }'

{ "data": { "user_id": "<string>", "email": null, "name": null, "role": "admin", "permissions": { "resources_list": true, "resources_create": true, "resources_edit": true, "resources_delete": true, "assistants_create": true, "assistants_edit": true, "assistants_delete": true, "api": true, "mcp": true }, "assistant_ids": [ "<string>" ] }, "request_id": "<string>" }

{ "error": { "type": "<string>", "code": "<string>", "message": "<string>", "param": "<string>", "docs_url": "<string>", "action_url": "<string>" }, "request_id": "<string>" }

Change a member's permissions

Authorizations

Path parameters

Body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown