Share document

Access & visibility

Allow documents.ShareDocument on your API key.

Acting member required. Send Brigg-Act-As with an approved member account ID. The key supplies permissions; the member selects whose data is used.

The selected member must be active and approved by the credential. This selects whose private data is used; the credential supplies permissions. Private ownership and project boundaries still apply.

Set up authentication · Choose permissions

Request fields

Send a JSON object with the following fields. Required fields must be included; omit optional fields you do not need.

document_idstringRequired

Document ID from workspace.ListBundles filtered to kind=document. This is different from the file_id of an uploaded or text document.

At least 1 character.

version_idstringOptional

Version identifier.

At least 1 character.

ttl_daysintegerOptional

Number of days before the share link expires.

Maximum: 365. Greater than 0.

Response

Returns 200 OK with a JSON body.

document_idstringRequired

Document ID from workspace.ListBundles filtered to kind=document. This is different from the file_id of an uploaded or text document.

urlstringRequired

Absolute URL, including its scheme.

share_idstringRequired

Non-secret identifier of a share link returned by a share or share-list operation. Use it to revoke that link; it cannot be used to open the document. Treat the separate url value as a bearer credential.

version_idstringRequired

Version identifier.

expires_atnumberRequired

Expiry time in Unix milliseconds. Obtain a fresh transfer or download URL after expiry.

Errors & retries

Set BRIGG_REQUEST_ID once for each logical action. The samples send it as Idempotency-Key. Reuse the same value and body on retries, including after a timeout; a missing response does not prove the action failed.

For rate limits, follow the server’s retry guidance and back off. See HTTP errors and safe retries and limits.

HTTP status	Code	What to do
400	`invalid_json`	Send a JSON object with Content-Type: application/json.
400	`invalid_input`	Check the request fields and types. Supply a stable Idempotency-Key containing 1–200 characters.
401	`invalid_key`	The workspace API key is missing, invalid or revoked.
403	`forbidden`	Check the key’s operation and resource grants. Supply Brigg-Act-As with a member authorized by the key’s delegation grant. The selected member must be active and approved by the credential. This selects whose private data is used; the credential supplies permissions. Private ownership and project boundaries still apply.
404	`not_found`	The requested operation or resource is not available to this credential.
429	`rate_limited`	Wait for Retry-After before retrying. Reuse the original Idempotency-Key.

Next steps

Download OpenAPI · Versioning & retirement

JSON schemas

Use the complete schemas for validation or client generation.

Full request JSON schema

{
  "type": "object",
  "properties": {
    "document_id": {
      "type": "string",
      "minLength": 1,
      "description": "Document ID from workspace.ListBundles filtered to kind=document. This is different from the file_id of an uploaded or text document."
    },
    "version_id": {
      "type": "string",
      "minLength": 1,
      "description": "Version identifier."
    },
    "ttl_days": {
      "type": "integer",
      "exclusiveMinimum": 0,
      "maximum": 365,
      "description": "Number of days before the share link expires."
    }
  },
  "required": [
    "document_id"
  ],
  "additionalProperties": false,
  "examples": [
    {
      "document_id": "e_example"
    }
  ]
}

Full response JSON schema

{
  "type": "object",
  "properties": {
    "document_id": {
      "type": "string",
      "description": "Document ID from workspace.ListBundles filtered to kind=document. This is different from the file_id of an uploaded or text document."
    },
    "url": {
      "type": "string",
      "description": "Absolute URL, including its scheme."
    },
    "share_id": {
      "type": "string",
      "description": "Non-secret identifier of a share link returned by a share or share-list operation. Use it to revoke that link; it cannot be used to open the document. Treat the separate url value as a bearer credential."
    },
    "version_id": {
      "type": "string",
      "description": "Version identifier."
    },
    "expires_at": {
      "type": "number",
      "description": "Expiry time in Unix milliseconds. Obtain a fresh transfer or download URL after expiry."
    }
  },
  "required": [
    "document_id",
    "url",
    "share_id",
    "version_id",
    "expires_at"
  ],
  "additionalProperties": false,
  "examples": [
    {
      "document_id": "e_example",
      "url": "https://example.com",
      "share_id": "e_example",
      "version_id": "e_example",
      "expires_at": 1794301200000
    }
  ]
}

Try the request

Use your API key in a server environment.

Requires BRIGG_ACT_AS: an approved member account ID.

Fictional values. Replace IDs and business details with values from your workspace.

Request

cURL

curl 'https://api.brigg.app/v1/operations/documents.ShareDocument' \
  -H "Authorization: Bearer $BRIGG_API_KEY" \
  -H 'Content-Type: application/json' \
  -H "Brigg-Act-As: $BRIGG_ACT_AS" \
  -H "Idempotency-Key: $BRIGG_REQUEST_ID" \
  --data-raw '{
  "document_id": "e_example"
}'

TypeScript

const actAs = process.env.BRIGG_ACT_AS;
if (!actAs) throw new Error("Set BRIGG_ACT_AS to an approved member account ID.");

const requestId = process.env.BRIGG_REQUEST_ID;
if (!requestId) throw new Error("Set BRIGG_REQUEST_ID once per action and reuse it on retries.");

const response = await fetch("https://api.brigg.app/v1/operations/documents.ShareDocument", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BRIGG_API_KEY}`,
    "Content-Type": "application/json",
    "Brigg-Act-As": actAs,
    "Idempotency-Key": requestId, // Create once per action; reuse on retries.
  },
  body: JSON.stringify({
    "document_id": "e_example"
  }),
});
const result = await response.json();
if (!response.ok) throw new Error(`${response.status}: ${result.error} — ${result.message}`);
console.log(result);

Python

import json
import os
from urllib.request import Request, urlopen
from urllib.error import HTTPError

request_id = os.environ["BRIGG_REQUEST_ID"]  # Reuse for retries of this action.
payload = {
  "document_id": "e_example"
}
request = Request(
    "https://api.brigg.app/v1/operations/documents.ShareDocument",
    data=json.dumps(payload).encode("utf-8"),
    headers={
        "Authorization": f"Bearer {os.environ['BRIGG_API_KEY']}",
        "Content-Type": "application/json",
        "Brigg-Act-As": os.environ["BRIGG_ACT_AS"],
        "Idempotency-Key": request_id,  # Create once per action; reuse on retries.
    },
    method="POST",
)
try:
    with urlopen(request) as response:
        print(json.load(response))
except HTTPError as error:
    print(error.code, json.load(error))
    raise

200 OK Response example

{
  "document_id": "e_example",
  "url": "https://example.com",
  "share_id": "e_example",
  "version_id": "e_example",
  "expires_at": 1794301200000
}

Illustrative values, not a live response.