> ## Documentation Index > Fetch the complete documentation index at: https://docs.codecobra.ai/llms.txt > Use this file to discover all available pages before exploring further. # Give someone a project role > Set one person's role on this project, by email or user id. A workspace member gets it in place of their workspace role; anyone else becomes an outside collaborator. 404 for an unknown address, 409 if they already have a project role. ## OpenAPI ````yaml /openapi.json post /api/projects/{project_id}/people openapi: 3.1.0 info: description: > The CodeCobra API drives the same product the dashboard does: create a project, open a task against it, watch the agent work, and merge what it builds. ## Authenticating Send a personal API key as a bearer token on every request: ``` Authorization: Bearer cc_your_key_here ``` Mint a key from **Settings → API keys** in the dashboard. A key carries the full access of the user who created it, including every organization they belong to, so treat it like a password and point automations at a user with the access they actually need. ## What is not here A few dashboard actions are deliberately absent, because an API key should not be able to widen its own reach or start a flow only a browser can finish: * signing in, signing up, password resets and two-factor enrolment; * creating, listing or revoking API keys — a leaked key cannot mint another; * linking or unlinking a Google or GitHub identity; * connecting or disconnecting a GitHub App installation, which needs an OAuth round-trip in a browser to restore. Everything else the dashboard can do is in this reference. ## Conventions Identifiers are UUIDs. Timestamps are ISO 8601 in UTC. Money is a decimal string in USD. A failed request returns its reason in the `detail` field with a conventional status code: `401` for a missing or invalid key, `403` when the key's user lacks access to the object, `404` when it does not exist, and `429` when a rate limit is in play. title: CodeCobra API version: 1.0.0 servers: - description: Production url: https://codecobra.ai - description: Staging url: https://staging.codecobra.ai security: - ApiKeyBearer: [] tags: - description: >- The profile behind the API key, plus the app-wide configuration an integration needs before it can create anything: the Odoo versions on offer and the models a task may run on. name: Account - description: >- Projects are the unit of ownership. A project pins an Odoo version and edition, carries the GitHub repositories the agent works in, and holds every task underneath it. Deleting one removes its tasks, pods and stored files. name: Projects - description: >- A task is one conversation with the agent inside a project. These endpoints create tasks, drive the chat, stream the response, manage attachments, and start the pod the agent runs in. name: Tasks - description: >- The plan the agent writes before it builds, its revision history, and the files a task produces. Approving a plan is what releases the agent to start work. name: Plans & Artifacts - description: >- The pull requests a task opens: checking CI, asking the agent to fix a red build, choosing a merge target, and merging to a branch that deploys. name: Pull Requests & Deploys - description: >- Odoo databases a task can reach. Credentials are stored per project and activated per task; the probe endpoints validate a URL and login before anything is saved. Also covers the throwaway Odoo instance a task runs against. name: Odoo Connections - description: >- Shared accounts. A workspace owns projects on behalf of its members and is billed as one entity. name: Workspaces - description: >- Who belongs to a workspace and at what role, and the invitations that put them there. name: Members & Invitations - description: >- The GitHub App installations backing a personal or workspace account, and the repositories and branches they expose to projects. Connecting and disconnecting GitHub needs a browser round-trip and stays in the dashboard. name: GitHub - description: Balance, payment methods, invoices and auto-reload for a personal account. name: Billing - description: >- The same billing operations for a workspace, settled against the workspace's balance rather than a member's. name: Workspace Billing - description: >- What has been spent, broken down by task, project or workspace, and exportable over a date range for billing reconciliation. name: Usage paths: /api/projects/{project_id}/people: post: tags: - Projects summary: Give someone a project role description: >- Set one person's role on this project, by email or user id. A workspace member gets it in place of their workspace role; anyone else becomes an outside collaborator. 404 for an unknown address, 409 if they already have a project role. operationId: add_project_person_api_projects__project_id__people_post parameters: - in: path name: project_id required: true schema: format: uuid title: Project Id type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/AddProjectPersonRequest' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/ProjectPersonResponse' description: Successful Response '422': content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' description: Validation Error security: - HTTPBearer: [] components: schemas: AddProjectPersonRequest: properties: email: anyOf: - type: string - type: 'null' title: Email role: maxLength: 20 minLength: 1 title: Role type: string user_id: anyOf: - format: uuid type: string - type: 'null' title: User Id required: - role title: AddProjectPersonRequest type: object ProjectPersonResponse: properties: effective_role: anyOf: - type: string - type: 'null' title: Effective Role effective_role_color: anyOf: - type: string - type: 'null' title: Effective Role Color effective_role_name: anyOf: - type: string - type: 'null' title: Effective Role Name email: title: Email type: string hidden_reason: anyOf: - type: string - type: 'null' title: Hidden Reason is_active: default: true title: Is Active type: boolean is_org_member: title: Is Org Member type: boolean is_owner: title: Is Owner type: boolean name: anyOf: - type: string - type: 'null' title: Name org_role: anyOf: - type: string - type: 'null' title: Org Role org_role_color: anyOf: - type: string - type: 'null' title: Org Role Color org_role_name: anyOf: - type: string - type: 'null' title: Org Role Name project_role: anyOf: - type: string - type: 'null' title: Project Role project_role_color: anyOf: - type: string - type: 'null' title: Project Role Color project_role_name: anyOf: - type: string - type: 'null' title: Project Role Name source: title: Source type: string user_id: format: uuid title: User Id type: string required: - user_id - email - is_org_member - is_owner - source title: ProjectPersonResponse type: object HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' title: Detail type: array title: HTTPValidationError type: object ValidationError: properties: ctx: title: Context type: object input: title: Input loc: items: anyOf: - type: string - type: integer title: Location type: array msg: title: Message type: string type: title: Error Type type: string required: - loc - msg - type title: ValidationError type: object securitySchemes: ApiKeyBearer: description: A personal API key from Settings → API keys. scheme: bearer type: http ````