Read the company page the calling member may see
Answers the company profile fields, metrics and records whose data room category the member reads. Each category names its fields; a field no category names is shown only to readers of X. The filtering happens in the database, so a field outside the caller's categories is never sent.
Authorization
memberToken The tools internkim uses inside a company, callable from outside it. A token belongs to a person, and every call runs as that person, so a token can never do more than its owner can.
The first token is made signed in, from the settings screen. After that a token makes its own
successors: POST /token for a new one, DELETE /token for the old one, so a script rotates
without a browser. A token can neither mint a rung above its own nor revoke itself.
Send Authorization: Bearer <token> on every request.
In: header
Response Body
text/plain
curl -X GET "https://example.com/data-room/company"Read a shared data room or request a permitted file URL GET
Uses a Supabase session bearer token or an explicitly published anonymous grant. Guest invitations must be accepted first. Original downloads require a download grant. Signed URLs expire after ten minutes.
Read the documents permitted by an opened share link GET
Requires the HttpOnly session cookie issued after code entry and acknowledgment. The link, its circle, and the permissions of its creator are checked on every read. Original downloads require a grant; signed URLs expire within one minute.