Select a workspace
GET /api/app/workspaces lists memberships. Send X-SandyWP-Workspace on later requests to select one; X-SandyWP-Organization remains a legacy alias.
For member and role routes, the selected workspace must match the :id in the path. A mismatch is deliberately returned as workspace_not_found.
Members
Members can see the workspace while still lacking permission to mutate it. A
403 capability_required means the current role lacks the requested capability.
Roles
Custom roles set the five capabilitiescreate, internals, reusables, integrations, and manage. Reading roles is available to workspace members; creating, updating, and deleting roles is owner-only.
Deleting a role assigned to a member returns 409 role_in_use. Reassign those members first, then retry the delete.
Use Plans and limits for workspace plan limits and CLI for terminal workspace selection.
