Share an app and control who signs in
A new app is private: only you and the people you add can open it. Ask Claude to add people by email, to open the app to your whole workspace, or, on paid plans, to everyone at your company's email domain or to the public. People sign in with a link sent to their email. They need no Haechy account and no password.
Four ways to open an app
| Who gets in | Plans | |
|---|---|---|
Private (private, the default) | You, the workspace admins, and the people you list for that app | All |
Workspace (team) | Everyone in your workspace, plus anyone you list | All |
Company domain (domain) | Anyone with an email address at the domains you name (up to 20) | Paid |
Public (public) | Anyone, with no sign-in | Paid |
Domain mode can't use public email providers such as gmail.com or outlook.com, since that would let in anyone with a free account. The workspace owner and admins can always open every app.
Set the mode by asking Claude ("make it open to everyone at northwind.example"). The tool behind it is set_app_access.
Adding and removing people
- You
Let Sam and Priya use the expense tracker.
- Tool
add_app_membersexpense-trackerDoneAdded 2 members to expense-tracker. Share the app's address with them.
- Claude
Done. Send Sam and Priya the address expense-tracker.haechy.app. When they open it, Haechy emails them a sign-in link.
Claude uses add_app_members and remove_app_members, and list_app_members shows who is on the list. Adding someone doesn't send them an email: share the address, and Haechy sends the sign-in link when they open it. Removing someone ends their access at their next sign-in, which can be up to 12 hours later, because a session that has already started runs its course. If it can't wait, ask Claude to stop the app (stop_app) until then; code, data and settings are kept.
What your colleague sees
They open the app's address and are asked for their email. They receive a message titled "Sign in to <app name>", which says the app is hosted on Haechy for you. The link works once and expires after 15 minutes. After that the browser stays signed in for 12 hours, and the same link covers your other apps in the workspace for that time. There is no password to remember or reset.
Google and Microsoft sign-in aren't available, so don't promise them to colleagues.
What if someone who isn't on the list tries?
A person who isn't allowed in sees an access-denied page. You get one email per person per day saying that "<email> asked for access to <app>", so you can add them if that was expected. If the reason is the plan's people limit, the email says so.
Teammates and app members are different
An app member can open one app. A teammate belongs to the workspace itself, and is added with invite_teammates, which sends them an invitation. Teammates have a role: member, or admin. Admins can open every app and can also approve outside services for apps, which is why you should give the role to few people (how approvals work).
The people limit
The plan counts distinct email addresses across workspace members and the app members of apps that haven't been deleted, so one person on three apps counts once. Visitors who get in through company-domain or public mode are not counted. On Free that is 5 people, you included; the sixth is refused with a link to upgrade, and apps that are already running carry on. The numbers for every plan are in plan limits and on pricing.