curl -X PUT 'https://api.github.com/orgs/example-org/codespaces/access' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "visibility": "disabled"
}'

# PUT /orgs/{org}/codespaces/access (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Status: Deprecated.
Request formats: application/json.
Last verified: 2026-10-20

> Manage access control for organization codespaces

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X PUT 'https://api.github.com/orgs/example-org/codespaces/access' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "visibility": "disabled"
}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| org | path | string | Yes | The organization name. The name is not case sensitive. |
| visibility | body | string | Yes | Which users can access codespaces in the organization. `disabled` means that... |
| selected_usernames | body | string[] | No | The usernames of the organization members who should have access to codespace... |

## Response example
null

---
Need an API key? Get one at https://github.com/settings/tokens

PUT

PUT /orgs/{org}/codespaces/access — GitHub API

Deprecated

GitHub token (required); https://api.github.com

GitHub API

Manage access control for organization codespaces

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 241 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X PUT 'https://api.github.com/orgs/example-org/codespaces/access' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{  "visibility": "disabled"}'

Parameters

Name	In	Type	Required	Description
org	path	string	Yes	The organization name. The name is not case sensitive.
visibility	body	string	Yes	Which users can access codespaces in the organization. `disabled` means that no users can access codespaces in the organization.
selected_usernames	body	string[]	No	The usernames of the organization members who should have access to codespaces in the organization. Required when `visibility` is `selected_members`. The provided list of usernames will replace any existing value.

Response 200 OK

null

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.