Set or clear an organization's parent

POST

/organizations/{org_id}/parent

curl --request POST \
  --url https://quikstik-core.fly.dev/organizations/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/parent \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: example' \
  --header 'x-tenant-id: 2489E9AD-2EE2-8E00-8EC9-32D5F69181C0' \
  --data '{ "parent_org_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" }'

• Production

Re-parents an Organization. A null parent_org_id makes it a root. A cross-tenant parent or a parent that would introduce a cycle (including self-parent) is rejected (409).

Authorizations

• bearerAuth

Parameters

Path Parameters

org_id

required

string format: uuid

Header Parameters

x-tenant-id

required

string format: uuid

Tenant identifier (UUID).

Authn/authz semantics are intentionally TBD for this contract slice; this header exists to keep the contract explicitly multi-tenant from day 0.

Idempotency-Key

required

string

>= 1 characters

Idempotency key for the command envelope. A retry with the same key is a no-op.

Request Body^required

Media typeapplication/json

object

parent_org_id

Null makes the organization a root.

string format: uuid

nullable

Example ^generated

{
  "parent_org_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

Responses

202

Re-parent accepted

Media typeapplication/json

object

org_id

required

string format: uuid

Example ^generated

{
  "org_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

400

Malformed body

Media typeapplication/json

object

reason

required

string

Example ^generated

{
  "reason": "example"
}

401

Missing or invalid session bearer token

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

403

The session’s effect authority does not cover this operation

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

404

Expired, consumed, unknown, or unresolvable — indistinguishable by design

Media typeapplication/json

object

reason

required

string

Example ^generated

{
  "reason": "example"
}

409

The change is rejected by a domain invariant (e.g. a hierarchy cycle)

Media typeapplication/json

object

code

required

Stable machine-readable error code

string

message

required

Human-readable explanation (never leaks SQL, URLs, or secrets)

string

Example ^generated

{
  "code": "example",
  "message": "example"
}

503

No durable backend is wired for this operation (fail-closed)

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}