Read a shared data room or request a permitted file URL
Uses a Supabase session bearer token or an explicitly published anonymous grant. Guest invitations must be accepted first. Original downloads require a download grant. Signed URLs expire after ten minutes.
Authorization
memberToken The tools internkim uses inside a company, callable from outside it. A token belongs to a person, and every call runs as that person, so a token can never do more than its owner can.
The first token is made signed in, from the settings screen. After that a token makes its own
successors: POST /token for a new one, DELETE /token for the old one, so a script rotates
without a browser. A token can neither mint a rung above its own nor revoke itself.
Send Authorization: Bearer <token> on every request.
In: header
Path Parameters
uuidQuery Parameters
uuidA derived file such as content.txt; omit to request the original.
Response Body
text/plain
curl -X GET "https://example.com/data-room/497f6eca-6276-4993-bfeb-53cbbbba6f08"Read what a share link for a circle would show, before creating one GET
Answers a member who could share the circle with exactly the categories and documents its link would show. canDownload=1 previews a link that allows original downloads, when the member could create one. Signed URLs expire after one minute.
Read the company page the calling member may see GET
Answers the company profile fields, metrics and records whose data room category the member reads. Each category names its fields; a field no category names is shown only to readers of X. The filtering happens in the database, so a field outside the caller's categories is never sent.