@Jarand Basically it will be a new mutation for the "InviteCodeValidate" operation. Then implement it as a resolver, it will check if the user has the invite code(maybe generated as some kind of token) given the code and the user email.