Skip to content
agent-paste.sh
Docs

Sharing and Access Links

Share human-readable viewers and machine-readable manifests without exposing credentials.

Signed URL shape

Access Link Signed URLs are shaped like https://app.agent-paste.sh/al/{publicId}#{blob}. The signature payload lives in the URL fragment so it is not sent to servers in normal HTTP requests.

The publicId identifies the link row. The fragment is the credential. Re-minting creates a fresh signed URL with a fresh expiration.

Use Access Link Signed URLs minted from Share Links only for explicit unlisted no-login handoff. They open the controlled Artifact Viewer and follow later publishes. Use Revision Links or Revision Content URLs only when the reader must see one exact Revision as raw bytes. Do not send a direct usercontent URL as the final live page.

Create, mint, revoke, lockdown

Use the dashboard Access Links page or Artifact detail page to create links, reveal freshly minted signed URLs, revoke links, or engage Access Link Lockdown for an Artifact.

MCP can set visibility to unlisted, create Revision Links, list links, and revoke links for authenticated members. On the CLI, agent-paste set-visibility <artifact-id> unlisted creates or reuses the Share Link; agent-paste set-visibility <artifact-id> private revokes active Access Links. Publish itself is content-only and never creates a Share Link. Ongoing link listing and revocation stay in the dashboard or MCP.

Recipients

A Workspace Member opens the private_url clean viewer (/v/<artifactId>) by default. When a user explicitly asks for a shareable no-login page, run agent-paste set-visibility <artifact-id> unlisted on the CLI, or the MCP set_visibility tool with visibility: "unlisted", to mint or reuse the unlisted Share Link and return unlisted_url. Use Agent View when an agent needs file trees, metadata, or signed per-file URLs.