# Share an internal tool with your team, a department or clients

An app on Scava is private until you share it. To share an internal tool with your team, give the app a list of people who may open it: single email addresses, a whole company domain such as `@company.com`, or a group you made. Everyone on the list signs in and opens the link. Viewers do not sign up for anything and never pay.

## Who can open an app

A person can open an app if one of these is true:

- they are the owner,
- they are a co-editor of the app,
- the app is shared with their email address,
- the app is shared with the domain of their email address (`@company.com`),
- they belong to a group the app is shared with (`group:leads`).

And the house rules of the owner do not keep them out. See [House rules](/docs/house-rules).

There are no public links. Nobody opens an app without signing in.

## Share an app

With your agent:

```text
Share the vacation planner with anna@company.com and with everyone at @company.com.
```

The agent uses the tool `share_app`. On scava.ai the same is the share field on the app page. You can enter several targets separated by spaces, commas or semicolons.

| Target | Looks like | Effect |
|---|---|---|
| One person | `anna@company.com` | That address can open the app. Scava sends an invitation email. |
| A company domain | `@company.com` | Everyone with an address at that domain can open the app. No emails are sent. |
| A group | `group:leads` | The members of that group of your account can open the app. No emails are sent. |

At most 200 shares per app. A domain or a group counts as one.

### Company domains

Sharing with a domain works for company domains only. Domains of public mailbox providers, such as `gmail.com`, `outlook.com`, `icloud.com` or `gmx.de`, are refused, because that would open the app to millions of people. Share with the single addresses instead.

### Groups

A group is a named list of email addresses in your account, for example `leads` or `hr`. You create and change groups on the Overview page at scava.ai, in the browser, never through an agent. Group names use lowercase letters, digits, `-` and `_`. The same groups are used in [permission rules](/docs/rules). See [House rules](/docs/house-rules).

### The invitation email

Single addresses receive an email that names who shared the app, links to it, and says that Scava never asks for a password. The email has a link to report the share if it was not expected. Invitation emails are limited per account and day.

## Asking for access

A person who opens an app that is not shared with them sees a "No access" page. The page does not show the app's name or owner. A button lets them request access.

The owner and the co-editors get an email. On the app page they see the open requests and approve or decline each. Approving adds that address to the shares of the app.

## Remove access

Remove the share on the app page, or ask your agent to (the tool `share_app` with `remove`). Removing a share takes effect on the person's next request. If the person is also covered by another share, for example the company domain, they can still open the app. To keep someone out of all your apps at once, even where a whole domain is shared, use "remove person" on the Overview page. See [House rules](/docs/house-rules).

## Clients and partners outside the company

Share with their email addresses one by one. Each person signs in with Google or an emailed code, like your colleagues. A client with a personal mailbox works as well.

By default Scava lets you share with anyone. The owner can narrow this with a house rule:

- anyone,
- only people inside the owner's company and a list of partner domains,
- nobody outside the company.

The company is the domain of the email address of the account. The rule applies to every request, so tightening it cuts off existing outside shares at once, and loosening it brings them back. People outside see a message that the owner only shares inside their company.

## Plans and people

Each plan sets how many different people besides the owner can open one app. People who already opened an app keep access when a plan gets smaller. Without a plan, nobody else can open the owner's apps and no invitations are sent. See [Limits](/docs/limits).