Organization

An Organization is the top-level container that holds Spaces. A company or a team corresponds to one Organization, and several Spaces live under it. The subscription plan (plan) and membership are managed at the Organization level, so billing and member permissions apply based on this Organization rather than the Space.

You read the list of Organizations you belong to with GET /me/organization-memberships. This resource has no endpoint that returns the full list.

Resource structure

The following is the single-read response for the Organization "DailyWear Company". It has sys (system properties) and the body properties name and description.

{
  "sys": {
    "id": "ilLRJxDp",
    "type": "Organization",
    "createdBy": { "sys": { "id": "3p4tcFbQRwz503VXdtHXNI5dZH5TVB", "type": "Refer", "targetType": "User" } },
    "createdAt": "2026-05-11T10:51:16.832Z",
    "updatedBy": { "sys": { "id": "3p4tcFbQRwz503VXdtHXNI5dZH5TVB", "type": "Refer", "targetType": "User" } },
    "updatedAt": "2026-05-11T10:51:16.832Z",
    "version": 1,
    "isOfficial": false,
    "plan": { "sys": { "id": "free", "type": "Refer", "targetType": "Plan" } }
  },
  "name": "DailyWear Company",
  "description": "Company running an online clothing and accessories store"
}

Key properties:

• name: The name of the Organization (1-64 characters). It is the display name of the company or team.
• description: A description of the Organization (1-128 characters, optional).
• plan: A Refer<Plan> that points to this Organization's subscription plan (e.g. free). The billing plan is tied here.
• isOfficial: Whether this is an official Organization (boolean).

System properties (sys) and body

Every Organization carries common system properties in the sys object. createdBy and updatedBy are in the Refer shape ({ "sys": { "id", "type": "Refer", "targetType" } }), and plan is a Refer<Plan>.

Body properties:

An Organization is a settings resource with no publishing concept. So unlike Content and Media, its sys has no publish, archive, or status, only version. The version increases each time you update the Organization.

Update (PUT) replaces the whole resource, and the two optional properties answer an omitted value differently. Leaving out icon keeps the stored icon, while leaving out consoleHomeUrl clears the stored URL. To keep a consoleHomeUrl that is already set, send it again with every update. Partial update (PATCH) touches only the properties named in the patch, so it leaves consoleHomeUrl alone unless you address it.

What the page has to satisfy

A stored address does not mean the page renders. If you point it at an address that refuses to be shown, the update still succeeds, no error comes back, and the only symptom is that nothing appears on the home screen.

For the page to render in that spot, it has to satisfy the following.

• Serve it over HTTPS. The console runs on HTTPS, so the browser blocks a page on an insecure connection from rendering inside it.
• Allow being rendered inside another page. Set the response header Content-Security-Policy: frame-ancestors https://console.weegloo.com. If X-Frame-Options blocks it, adjust that as well.
• If the page uses cookies, issue them with SameSite=None; Secure. It renders inside another site, so a cookie without that attribute is never sent.

The page renders inside an <iframe>, and only the permissions below are open on that frame.

Anything not listed here does not work. No error is raised and the call is silently ignored, so code cannot tell whether it was blocked.

The frame also carries referrerpolicy="strict-origin-when-cross-origin", so the page receives the console's origin and not the screen it was opened from.

Apart from sandbox, a page that requires a login may not work. Most login providers block signing in from inside another page, so social login generally does not work.

Errors

These are the codes you meet when working with an Organization. For codes that are common to every resource, see common errors.

API

The base URL for all endpoints below is https://cma.weegloo.com/v1, and a Bearer token that authenticates against CMA is required in the Authorization header. Update and partial update must also send the X-Weegloo-Version header (the current resource's sys.version) for optimistic concurrency control. Create and delete do not have this header.

Related documents

• Space: The Spaces under this Organization.
• Organization Membership: Organization members and reading the organizations you belong to.