Core Concepts
Share Settings & Access Control
Control who can view your tunnel and whether guests can leave comments.
Share modes
Each tunnel has a share mode controlling who can view it:
| Mode | Description |
|---|---|
| Invite Only | Only users explicitly added as tunnel members can view |
| Anyone with Link | Anyone with the share URL can view (default) |
| Password Protected | Anyone with the link can view, but must enter a password first |
Password protection
When password protection is enabled, viewers are prompted for a password before accessing the tunnel. Passwords are stored securely — the plaintext is never stored.
Guest comments toggle
Guest comments are enabled by default — this controls whether non-authenticated visitors can leave comments. When disabled, only signed-in users who are tunnel members can comment.
Tunnel member roles
| Role | Capabilities |
|---|---|
| Owner | Full control: edit, delete, manage members, reopen tunnel |
| Admin | Edit settings, manage members, delete any comment |
| Viewer | View tunnel and leave comments |
Members can have status Active (accepted) or Pending (invited but not yet accepted). Only Admin and Viewer can be assigned when inviting — Owner is set automatically for the tunnel creator.
Workspace admins are automatically treated as owners for all tunnels in the workspace, regardless of explicit tunnel membership.
Share link access matrix
| Access mode | Guest can view | Tunnel member can view | Guest can comment |
|---|---|---|---|
| Invite Only | No | Yes | No |
| Anyone with Link | Yes | Yes | No |
| Password Protected | Yes (after password) | Yes | No |