diff --git a/app/global_invite/rest.py b/app/global_invite/rest.py
index f205f93fc..7727c44f3 100644
--- a/app/global_invite/rest.py
+++ b/app/global_invite/rest.py
@@ -38,3 +38,15 @@ def validate_invitation_token(invitation_type, token):
         return jsonify(data=invited_user.serialize()), 200
     else:
         raise InvalidRequest("Unrecognised invitation type: {}".format(invitation_type))
+
+
+@global_invite_blueprint.route('/service/<uuid:invited_user_id>', methods=['GET'])
+def get_invited_user(invited_user_id):
+    invited_user = get_invited_user_by_id(invited_user_id)
+    return jsonify(data=invited_user_schema.dump(invited_user).data), 200
+
+
+@global_invite_blueprint.route('/organisation/<uuid:invited_org_user_id>', methods=['GET'])
+def get_invited_org_user(invited_org_user_id):
+    invited_user = dao_get_invited_organisation_user(invited_org_user_id)
+    return jsonify(data=invited_user.serialize()), 200
diff --git a/tests/app/global_invite/test_global_invite_rest.py b/tests/app/global_invite/test_global_invite_rest.py
index 98c3887f6..41f125f38 100644
--- a/tests/app/global_invite/test_global_invite_rest.py
+++ b/tests/app/global_invite/test_global_invite_rest.py
@@ -83,3 +83,42 @@ def test_validate_invitation_token_returns_400_when_token_is_malformed(client, i
     assert json_resp['message'] == {
         'invitation': 'Something’s wrong with this link. Make sure you’ve copied the whole thing.'
     }
+
+
+def test_get_invited_user(admin_request, sample_invited_user):
+    json_resp = admin_request.get(
+        'global_invite.get_invited_user',
+        invited_user_id=sample_invited_user.id
+    )
+    assert json_resp['data']['id'] == str(sample_invited_user.id)
+    assert json_resp['data']['email_address'] == sample_invited_user.email_address
+    assert json_resp['data']['service'] == str(sample_invited_user.service_id)
+    assert json_resp['data']['permissions'] == sample_invited_user.permissions
+
+
+def test_get_invited_user_404s_if_invite_doesnt_exist(admin_request, sample_invited_user, fake_uuid):
+    json_resp = admin_request.get(
+        'global_invite.get_invited_user',
+        invited_user_id=fake_uuid,
+        _expected_status=404
+    )
+    assert json_resp['result'] == 'error'
+
+
+def test_get_invited_org_user(admin_request, sample_invited_org_user):
+    json_resp = admin_request.get(
+        'global_invite.get_invited_org_user',
+        invited_org_user_id=sample_invited_org_user.id
+    )
+    assert json_resp['data']['id'] == str(sample_invited_org_user.id)
+    assert json_resp['data']['email_address'] == sample_invited_org_user.email_address
+    assert json_resp['data']['organisation'] == str(sample_invited_org_user.organisation_id)
+
+
+def test_get_invited_org_user_404s_if_invite_doesnt_exist(admin_request, sample_invited_org_user, fake_uuid):
+    json_resp = admin_request.get(
+        'global_invite.get_invited_org_user',
+        invited_org_user_id=fake_uuid,
+        _expected_status=404
+    )
+    assert json_resp['result'] == 'error'