v2

latestOpenAPI 3.1.02026-08-05267431678.1 KB
teams

Transfer Ownership

Transfer team ownership to another member.

Only the current owner can transfer ownership. The current owner becomes an admin after transfer.

Accepted risk (ENG-1281): AAL2 enforcement was intentionally removed (PR #3928) — users without MFA enrolled were being blocked from routine team operations. Ownership transfer is the highest-impact admin action; an AAL1 attacker on the owner's session could hand the team to a colluding member and pivot into credential / billing surfaces. This risk is accepted per the design decision.

Path params are typed as :class:uuid.UUID so FastAPI rejects malformed inputs with a clean 422 at the API boundary instead of letting them leak into the service and trip an asyncpg invalid input syntax for type uuid 500 via the role lookup (ENG-2214 / Sentry PYTHON-1SY0).

post/teams/{team_id}/transfer-ownership/{new_owner_id}

Path parameters

team_idstring uuid required
new_owner_idstring uuid required

Response

Successful Response

object required