All chapters

Share an internal tool with your team, a department or clients

An app on Scava is private until you share it. To share an internal tool with your team, give the app a list of people who may open it: single email addresses, a whole company domain such as @company.com, or a group you made. Everyone on the list signs in and opens the link. Viewers do not sign up for anything and never pay.

Who can open an app #

A person can open an app if one of these is true:

they are the owner,
they are a co-editor of the app,
the app is shared with their email address,
the app is shared with the domain of their email address (@company.com),
they belong to a group the app is shared with (group:leads).

And the house rules of the owner do not keep them out. See House rules.

There are no public links. Nobody opens an app without signing in.

With your agent:

Share the vacation planner with anna@company.com and with everyone at @company.com.

The agent uses the tool share_app. On scava.ai the same is the share field on the app page. You can enter several targets separated by spaces, commas or semicolons.

Target	Looks like	Effect
One person	`anna@company.com`	That address can open the app. Scava sends an invitation email.
A company domain	`@company.com`	Everyone with an address at that domain can open the app. No emails are sent.
A group	`group:leads`	The members of that group of your account can open the app. No emails are sent.

At most 200 shares per app. A domain or a group counts as one.

Company domains #

Sharing with a domain works for company domains only. Domains of public mailbox providers, such as gmail.com, outlook.com, icloud.com or gmx.de, are refused, because that would open the app to millions of people. Share with the single addresses instead.

Groups #

A group is a named list of email addresses in your account, for example leads or hr. You create and change groups on the Overview page at scava.ai, in the browser, never through an agent. Group names use lowercase letters, digits, - and _. The same groups are used in permission rules. See House rules.

The invitation email #

Single addresses receive an email that names who shared the app, links to it, and says that Scava never asks for a password. The email has a link to report the share if it was not expected. Invitation emails are limited per account and day.

Asking for access #

A person who opens an app that is not shared with them sees a "No access" page. The page does not show the app's name or owner. A button lets them request access.

The owner and the co-editors get an email. On the app page they see the open requests and approve or decline each. Approving adds that address to the shares of the app.

Remove access #

Remove the share on the app page, or ask your agent to (the tool share_app with remove). Removing a share takes effect on the person's next request. If the person is also covered by another share, for example the company domain, they can still open the app. To keep someone out of all your apps at once, even where a whole domain is shared, use "remove person" on the Overview page. See House rules.

Clients and partners outside the company #

Share with their email addresses one by one. Each person signs in with Google or an emailed code, like your colleagues. A client with a personal mailbox works as well.

By default Scava lets you share with anyone. The owner can narrow this with a house rule:

anyone,
only people inside the owner's company and a list of partner domains,
nobody outside the company.

The company is the domain of the email address of the account. The rule applies to every request, so tightening it cuts off existing outside shares at once, and loosening it brings them back. People outside see a message that the owner only shares inside their company.

Plans and people #

Each plan sets how many different people besides the owner can open one app. People who already opened an app keep access when a plan gets smaller. Without a plan, nobody else can open the owner's apps and no invitations are sent. See Limits.