Organizations are shared workspaces that let you collaborate with your team on CarsXE. Instead of every teammate managing their own account and API key, an organization gives you a single place to invite members, control what they can do with roles, and manage **organization API keys** that everyone can use.

You manage organizations from your [dashboard](/dashboard). No separate API is required.

<Note>
  Billing is **not** organization-specific. Usage from organization API keys rolls up to the
  organization owner's personal subscription. There is no separate per-organization plan or invoice.
</Note>

## Key concepts

<div className="grid sm:grid-cols-2 gap-4 mt-6">

<Card href="#roles-and-permissions">

### Roles & permissions

Owner, admin, editor, and viewer roles control what each member can do.

</Card>

<Card href="#team-and-invitations">

### Team & invitations

Invite teammates by email. Invitations expire after 7 days.

</Card>

<Card href="#organization-api-keys">

### Organization API keys

Shared keys that authenticate API requests for the whole team.

</Card>

<Card href="#billing">

### Billing

Organization usage is billed to the owner's personal subscription.

</Card>

</div>

## Roles and permissions

Every member of an organization has one of four roles. The **owner** is the user who created the organization and cannot be removed. All other members are assigned one of the remaining roles.

| Capability | Owner | Admin | Editor | Viewer |
| --- | :---: | :---: | :---: | :---: |
| View team & API keys | Yes | Yes | Yes | Yes |
| Create API keys | Yes | Yes | Yes | No |
| Enable/disable & rename API keys | Yes | Yes | Yes | No |
| Delete API keys | Yes | Yes | No | No |
| Invite members | Yes | Yes | No | No |
| Update member roles & remove members | Yes | Yes | No | No |
| Invite, promote, or manage admins | Yes | No | No | No |
| Edit organization settings | Yes | No | No | No |
| Delete the organization | Yes | No | No | No |

<Note>
  Admins can manage editors and viewers, but only the owner can invite, promote, or manage other
  admins. The owner cannot be removed or have their role changed.
</Note>

## Team and invitations

Owners and admins can invite teammates to the organization by email, one at a time or in bulk. Each invitation is sent with the role you choose for the invitee.

- **Expiry** — Invitations expire 7 days after they are sent.
- **Accepting** — The invitee receives an email with a link to accept. They must sign in (or create an account) with the invited email address to join.
- **Pending & failed invites** — The team view lists active members alongside any pending or failed invitations so you can resend them.
- **Removing members** — Owners and admins can remove members at any time. Removing a member immediately revokes their access to the organization.

## Organization API keys

Organization API keys work exactly like personal API keys when calling the CarsXE API — you pass them as the `key` parameter on any endpoint. The difference is that an organization key belongs to the workspace, so any current member can use it and key management is shared across the team.

- **Shared access** — Any member can use an organization key to make API requests, subject to their role's permissions for managing keys.
- **Usage tracking** — Each key tracks lifetime usage and monthly usage broken down by API type.
- **Status** — A key is active only while the organization owner's subscription is active. If the owner's subscription becomes inactive, the organization's keys stop working until it is reactivated.

Use an organization API key the same way you use any CarsXE key:

<CodeGroup>

```bash
curl https://api.carsxe.com/v1/auth/validate \
  -d key=ORGANIZATION_API_KEY
```

</CodeGroup>

See [Authentication](/docs/authentication) for more on how API keys authenticate your requests.

## Billing

Organizations are a collaboration and access-management layer — they are not a billing entity. When a request is made with an organization API key, the usage resolves to the **owner's** account and counts against the owner's personal subscription.

This means:

- There is no separate organization plan, invoice, or payment method.
- All organization API usage is consumed from the owner's subscription quota.
- If the owner's subscription is inactive, every organization API key is inactive until the subscription is restored.

## Deleting an organization

Only the owner can delete an organization. Deleting an organization removes the team's access to its shared API keys. Be sure your team has migrated to other keys before deleting.

## Get started

Ready to set up your team? Head to your [dashboard](/dashboard) to create an organization, invite members, and generate your first organization API key.