---
title: "Get sharing settings"
description: "Who can open a document and the people it is shared with."
canonical_url: https://docs.markdrop.in/api/access/get-sharing-settings
last_updated: 2026-10-30
site: "Markdrop Docs"
index: https://docs.markdrop.in/llms.txt
---

# Get sharing settings

`GET https://api.markdrop.in/api/v1/documents/{slug}/access`

Who can open a document and the people it is shared with. People with a role on the document can call it; the list of people is for the owner and editors.

- **Authentication:** API token required: `Authorization: Bearer mdk_…`.
- **Rate limit:** 120 per minute per IP address.
- **Guide:** [Who can open a document](https://docs.markdrop.in/sharing/who-can-open)

## Path parameters

- `slug` (string, required): The document's address: the part after `markdrop.in/`.

## Responses

- `200`: OK.
  - `level` ("private" | "link" | "workspace")
  - `allow_resharing` (boolean)
  - `is_password_protected` (boolean)
  - `encrypted` (boolean): Set by clients that encrypt in the browser: `content` and `title` are already ciphertext. The server never sees the key.
  - `in_workspace` (boolean)
  - `workspace_id` (string | null)
  - `workspace_name` (string | null)
  - `folder_id` (string | null)
  - `can` (object | null)
  - `your_role` ("owner" | "editor" | "viewer")
  - `owner_name` (string | null)
  - `owner_email` (string | null)
  - `your_email` (string | null)
  - `can_manage` (boolean)
  - `can_share` (boolean)
  - `grants` (array of object)
    - `email` (string)
    - `role` ("viewer" | "editor")
    - `created_at` (string (date-time)): ISO 8601, for example `2026-11-30T12:00:00Z`.
    - `granted_by_email` (string | null)
    - `notified` (boolean): Default `false`.
    - `active` (boolean): Default `true`.
    - `effective_role` ("viewer" | "editor" | null)
  - `url` (string | null)
  - `workspace_url` (string | null)
  - `expires_at` (string (date-time) | null): ISO 8601, for example `2026-11-30T12:00:00Z`.
- `401`: No token, or the token is revoked or mistyped.
- `422`: The request didn't validate. `detail` lists each problem, with where it is (`loc`) and why (`msg`).
- `429`: Too many requests from your IP address. Wait the seconds in `Retry-After`.

## Examples

**curl**

```bash
curl https://api.markdrop.in/api/v1/documents/k3x9q2m/access \
  -H "Authorization: Bearer $MARKDROP_TOKEN"
```

**JavaScript**

```javascript
const res = await fetch("https://api.markdrop.in/api/v1/documents/k3x9q2m/access", {
  headers: {
    Authorization: `Bearer ${process.env.MARKDROP_TOKEN}`,
  },
});
const data = await res.json();
```

**Python**

```python
import os

import requests

r = requests.get(
    "https://api.markdrop.in/api/v1/documents/k3x9q2m/access",
    headers={"Authorization": f"Bearer {os.environ['MARKDROP_TOKEN']}"},
)
r.raise_for_status()
print(r.json())
```