Invite the restaurant's owner
Partner key + restaurant key. Emails the owner an invitation. The owner creates their own login, signs the customer agreement and the data processing agreement, sets up online payment and sets the restaurant live themselves once LettBestilt has approved it (see go-live approval). You cannot do those steps for the owner.
Real restaurants without an owner only, so it needs a live partner key (available once LettBestilt Partner is open). A sandbox gives 409 SANDBOX_NOT_SUPPORTED. The invitation expires after 7 days. There is no Idempotency-Key: calling again is “send again” and replaces the open invitation (also to another email address) with 7 new days. If the owner already has a LettBestilt account they get a notice with a link instead of a sign-up link, and must accept the invitation themselves (owner.status stays INVITED until then); the response is the same in both cases.
Limits: 5 sent invitations per hour per restaurant and 30 per partner, plus 20 attempts per hour per restaurant and 60 per partner (rejected ones included; shared with the partner portal). A rejected email (409/422) does not count as sent.
Authentication
The partner key, sent as Authorization: Bearer lbp_test_…. Created in LettBestilt Partner under Partner key. It belongs to the partner, not to a restaurant, and only works against /api/v1/partner. Server to server only: a request with an Origin header is rejected with 403 FORBIDDEN. A test key sees and creates only sandboxes; live partner keys are not available yet. A revoked key, a restaurant key (lbs_…) here, or a suspended or archived partner returns 401 UNAUTHORIZED; an expired key returns 401 KEY_EXPIRED.
The restaurant’s own key (lbs_test_… or lbs_live_…), sent in X-LettBestilt-Restaurant-Key together with the partner key for calls about one restaurant. The key must have full access (scope *, otherwise 403 INSUFFICIENT_SCOPE), belong to a restaurant the partner owns, and be in the same environment as the partner key (otherwise 401 UNAUTHORIZED). A slug that does not exist, belongs to another partner or does not match the key always gives the same 404 RESTAURANT_NOT_FOUND. Older keys without an environment in the prefix (lbs_<random>) are not accepted here; rotate them in LettBestilt Partner.
Path parameters
Request
Response
The invitation is sent (or, for an existing account, the notice). inviteId is what DELETE takes as inviteId.
En sendt eierinvitasjon. Utløper etter 7 dager.

