Confirm the pending transfer with the emailed code (owner only)

POST 
/api/tenants/ownership/confirm

OWNER-ONLY and rate-limited. Confirms with the 6-digit code emailed to the owner. On success ownership moves to the target (target becomes admin+owner; the old owner stays admin). Wrong code → 422 invalid_code (attempts counted); after 5 wrong → 422 too_many_attempts; expired → 422 expired.

Request

Responses

200

Transfer confirmed; ownership moved.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.

409

No pending transfer.

422

The request failed validation.

429

Rate limit exceeded.

Response Headers

X-RateLimit-Limit

Request quota for the current window.

X-RateLimit-Remaining

Remaining requests in the current window.

Retry-After

Seconds to wait before retrying.