Access control
Choose who can view a Shiplet and who can change its review settings.
Shiplet evaluates viewing and editing separately through the trusted host. View access never grants edit access.
Visibility
| Visibility | Who can open it |
|---|---|
private | Administrators, owners, and people with an explicit grant. |
organization | Members of the active organization. |
unlisted | Anyone with the link. |
public | Anonymous visitors, including discovery traffic. |
People and teams
Organizations contain members and teams. A Shiplet can also grant access to an exact invited email address. Invitations become effective for the matching signed-in identity.
Open Account at /account to inspect or switch the signed-in identity. Open Workspace at /workspace to choose the active organization.
Agent access
Interactive MCP uses browser OAuth. A compatible external agent can use a claimed WorkOS service_auth registration when the environment has enabled it. CI and unattended jobs use organization API keys.
A claimed registration retains the stable agent identity separately from the person who completed the claim. It is restricted to the exact organization in the access token, recognized scopes, and that person's current Shiplet membership and grants. Anonymous registrations and durable WorkOS agent API keys are not accepted in this release.
Artifact and custom widget code never receive WorkOS sessions, agent registration credentials, organization API keys, or ambient browser credentials.
Next: review API key guidance or prepare an organization-visible artifact.