Sharing an app and who can open it
Who can open an app is one setting with three values, plus a list of people invited by email address. The owner decides both.
The three levels
| Level | Who can open the link |
|---|---|
| Restricted | The owner, and the people named on the app. |
| Organization link | Anyone signed in to reachpad who is in your organization, plus the people named on the app. |
| Public link | Anyone who has the URL. |
A new app is an organization link. Only the owner can change the level, from the app's page or with the set_app_access tool.
An organization link is not private to the people you sent it to. Anyone at your company who is signed in and has the URL can open it.
A public link can carry a password, and a date after which it stops answering. Both apply to a public link only, and either can be cleared later.
Inviting one person
share_app takes an email address and a role. A viewer can open the app. An editor can also publish new versions and, when the owner enables Editors can change permissions and share, invite people, remove access, and change viewer/editor roles. The address gets an email naming who shared it, what it is, and the link.
An address with no reachpad account still gets the grant. It starts working the first time somebody signs in holding that address, so you can invite a colleague before they have an account.
list_app_shares shows everyone who has been added, their role, and whether their grant has attached to an account yet. The owner and permitted editors can use it. revoke_app_share removes one of them and touches nothing else; permitted editors can use it too. Editors cannot transfer ownership or change general access, which remains owner-only. The owner can turn off editor-managed sharing for an app, and one app can be shared with 100 people.
When somebody cannot open it
A signed-in person who follows a link they have no access to gets a page naming the app and a button that asks the owner for access. Reachpad accepts one ask per person per app per day, so a refresh does not become a way to fill somebody's inbox.
The page names the app on purpose: they arrived by following a link somebody sent them, so the app's existence is not the thing being withheld.
This page as raw markdown, for an agent or a prompt: /docs/sharing.md