mds

Share tokens let you give read-only access to a single doc without requiring the recipient to have an account. See Concepts for background on how share tokens fit into the permission model.

Open any rendered doc page. In the doc nav (top-right), click the share icon to open the share menu, then click Copy link. The server mints a token--or returns an existing unexpired one--and copies the share URL to your clipboard. No further steps; the recipient can open the link immediately.

Share-token viewers see the doc in read-only mode: no Share or Edit affordances, no access to other docs in the workspace.

Share-token URLs

A share URL is the doc's normal URL with ?s=<token> appended:

https://md.pgavlin.sh/o/<org>/w/<ws>/d/<ulid>?s=<token>

Anyone who has the URL can read the doc. Tokens are valid for 30 days from issue. After expiry, clicking Copy link from the share menu mints a fresh token.

Revoking a share

Open the doc's share menu and click Manage sharing to reach the doc's /shares page. Find the token you want to cancel and click Revoke. Revocation is immediate--the link stops working at the next request.

The /shares page

Each doc has its own /shares page, reachable from Manage sharing in the doc share menu. It lists every token ever minted for that doc with its status (active, expired, or revoked), the issue date, and the expiry date. Active tokens have a Revoke button; expired and revoked tokens are shown for reference only.