Docs

Sharing and access

A new document is private: only you open it, signed in with your email. You decide who else gets in.

Private you and the people you add by email.
Company that, plus everyone in your organization: its members and anyone who signs in with an email on its domains.
Public anyone with the link.

Add up to 100 emails per document: share in MCP, ashare share <id> <email>, emails in PATCH, or Share on the document page. Each new email gets a letter with the link. A reader opens the link, types their email and the 6-digit code from the letter. No account or password to create; their comments go under that email. Remove an email and that reader no longer gets in.

Sharing works on private and company documents. A public one refuses it: make it private first, or send {"visibility":"private","emails":[…]} in one PATCH.

Your company

visibility: "company" opens the document to your organization too. Without an organization, publish answers 400 and nothing is published. See Organizations.

Anyone with the link

Only when you ask for it: visibility: "public" in MCP, ?visibility=public in REST, --visibility public in the CLI, or later with protect. Links are unguessable and search engines do not index them. The plugin’s skill asks you before it makes anything public.

The visibility and expiry of new documents are set once on Settings; what publish passes wins.

Access requests

Someone not on the list who opens the link and confirms their email sees “You don’t have access” and can ask you in with a message of up to 500 characters. You get the request by email, and in Slack or your webhook if you set them up. Approve or deny it from the letter, on My documents, or with approve_access and deny_access. Approve adds the email and sends the person the link; deny sends nothing. The same person can ask again after a day, 3 times per document at most.

Who opened it

For a private or company document you see each signed-in reader with how many times and when: on the document page, with views in MCP or ashare views <id>. Such readers see a line that the owner sees they opened it. Readers of public documents are only counted.

Comments

Reading a public document needs no account. To comment, a reader signs in with a 6-digit code sent to their email; the comment goes under the name on their profile, or under the email, and the email shows on pointing at the name. Open threads are highlighted in the text. You get an email about new comments, at most one every 5 minutes per document; Slack and your own webhook get them at once. Choose on Settings, or silence one document with notify: "off".

Embedding

By default a document shows in a frame only on ashare.net. Allow your sites, like https://www.notion.so, up to 20 of them, or * for any site: embed_origins in protect or PATCH, ashare protect <id> --embed, or Embedding on the document page, which also gives you the <iframe> code. The default for all your documents lives on Settings. Embed public documents without a password: readers cannot sign in inside someone else’s site.