App access
share_app, set_app_access, list_app_access and revoke_app_access — controlling who is allowed to open a deployed app.
These tools control who can open a deployed app. That is a different thing from
invite_user, which grants a person control over the agenthost account
itself. An invitee here gets to load the running app and nothing else.
An app is either public — anyone with the link can open it — or invite-only, where every visitor must prove they own an invited email address. They do that with a one-time code the first time they open the app; there is no account and no password.
share_app
Give a specific person access to an app by email. This switches the app to invite-only: once shared, only invited addresses can open it and everyone else is turned away at a sign-in screen.
| Parameter | Type | Description |
|---|---|---|
service_id | uuid, required | App (service) id. |
email | string, required | Email address to grant access to. |
name | string | Optional display name for the invitee. |
Call it once per person; re-sharing the same address is a harmless no-op. The invitee is emailed a link to the app — when email is not configured on the server, the result hands you the link to share yourself instead.
The first share flips the switch
An app that was public becomes invite-only the moment you share it with anyone. Use
set_app_access to put it back.
set_app_access
Set whether an app is open to anyone with the link, or restricted to invited addresses.
| Parameter | Type | Description |
|---|---|---|
service_id | uuid, required | App (service) id. |
access | "public" or "invite", required | public opens it to anyone with the link; invite restricts it to invited addresses. |
Making an app public keeps the invitation list, so switching back to invite-only restores the same audience.
list_app_access
Show whether an app is public or invite-only and, when invite-only, everyone who has been given access — including whether each person has actually opened it.
| Parameter | Type | Description |
|---|---|---|
service_id | uuid, required | App (service) id. |
An invite-only app with an empty list is reachable by nobody, and the result says so.
revoke_app_access
Remove one person's access to an invite-only app. It takes effect immediately, even if they were already signed in. The app stays invite-only for everyone else.
| Parameter | Type | Description |
|---|---|---|
service_id | uuid, required | App (service) id. |
email | string, required | Email address to remove. |
Private apps are a paid feature
Putting the gate in front of an app — share_app, or set_app_access invite — needs a plan that
includes private apps; get_plan says whether this account has one. Making an app public is
never gated, so an account that loses the feature can still open its apps up, and an app that is
already private stays private in the meantime.