Skip to content

List toolbox shares

GET /toolbox/{id}/share

Lists who a toolbox is shared with. Cursor-paginated, and the only place the grant list is served — a toolbox may be granted to every member of the organization, so nothing else embeds it. Filter with `grantee_type`, search member names/emails and team names with `q`. Requires owner or `edit` access (own grant) — no `toolbox:manage` fallback.

Path Parameters

idstring
required·

Stored toolbox id (tbx_…).

Query Parameters

qstring

Match member name or email, or team name. LIKE wildcards are matched literally. Max 200 characters.

grantee_typestring

Restrict to one kind of grantee.

Possible values:
userteamorg

Response Body

next_cursorstring,null
prev_cursorstring,null
resultobject[]
created_atstring · date-time
granteeobject

Resolved display data, so a page of grants needs no follow-up lookups.

4 properties
avatar_urlstring,null

The person's picture: their stored profile picture, else a Gravatar URL (d=404, 96px) derived from their email (the address itself is not sent), else null. Draw initials when it is null or the image fails to load.

emailstring,null
member_countinteger,null

Team grants only: how many people the grant reaches.

namestring,null
grantee_idstring,null

Null for org-wide grants.

grantee_typestring
Possible values:
userteamorg
idstring

Share id (acl_…), the {aclId} that DELETE …/share/{aclId} takes.

levelstring
Possible values:
viewuseedit 
curl -X GET 'https://api.elaichi.ai/toolbox/<id>/share' \
  -H 'Authorization: Bearer $ELAICHI_API_TOKEN' \
  -H 'Content-Type: application/json'
const response = await fetch('https://api.elaichi.ai/toolbox/<id>/share', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer ' + process.env.ELAICHI_API_TOKEN,
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);
import os
import requests

url = "https://api.elaichi.ai/toolbox/<id>/share"
headers = {
    "Authorization": f"Bearer {os.environ['ELAICHI_API_TOKEN']}",
    "Content-Type": "application/json",
}

response = requests.get(url, headers=headers)
print(response.json())