Who can open what
A conversation that isn’t shared with the caller returns
403 with conversation_not_shared.
Share a conversation
- When you create it: pass
sharedWithto Create a new conversation. - Later: call Update conversation sharing with a
permissionofwriteornonefor each person or group. - To check: Get conversation sharing lists who has access.
Workspace is everyone in the workspace, API keys included.
Find the integrations to update
- In your workspace admin, go to Developers → API keys. Keys with the Admin scope keep working as before.
- For each other key with a recent Last used date, check whether its integration opens conversations it didn’t create. For example, a conversation ID copied from Dust, received from a webhook, or created with another key. Click a key to see the conversations it ran agents in, by credits or by latest activity.
- For those integrations, create the conversation with the same key and add people with
sharedWith, or switch to a key with the Admin scope.
Your audit logs show every access that bypasses sharing: each time a key with the Admin scope opens a conversation that isn’t shared with it, they record a
conversation.admin_access_granted event.