---
title: "Set access for several documents"
description: "Sets the access level of many documents you own at once."
canonical_url: https://docs.markdrop.in/api/access/set-access-for-several-documents
last_updated: 2026-10-30
site: "Markdrop Docs"
index: https://docs.markdrop.in/llms.txt
---

# Set access for several documents

`POST https://api.markdrop.in/api/v1/documents/access/level`

Sets the access level of many documents you own at once. Each one is checked on its own: the response has a result per address.

- **Authentication:** API token required: `Authorization: Bearer mdk_…`.
- **Rate limit:** 30 per minute per IP address.

## Request body

`application/json`, required.

- `slugs` (array of string, required): 1–200 items.
- `level` ("private" | "link" | "workspace", required)

## Responses

- `200`: OK.
- `401`: No token, or the token is revoked or mistyped.
- `422`: The request didn't validate. `detail` lists each problem, with where it is (`loc`) and why (`msg`).
- `429`: Too many requests from your IP address. Wait the seconds in `Retry-After`.

## Examples

**curl**

```bash
curl -X POST https://api.markdrop.in/api/v1/documents/access/level \
  -H "Authorization: Bearer $MARKDROP_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"slugs":["k3x9q2m","q3-report"],"level":"private"}'
```

**JavaScript**

```javascript
const res = await fetch("https://api.markdrop.in/api/v1/documents/access/level", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.MARKDROP_TOKEN}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "slugs": [
      "k3x9q2m",
      "q3-report"
    ],
    "level": "private"
  }),
});
const data = await res.json();
```

**Python**

```python
import os

import requests

r = requests.post(
    "https://api.markdrop.in/api/v1/documents/access/level",
    headers={"Authorization": f"Bearer {os.environ['MARKDROP_TOKEN']}"},
    json={"slugs": ["k3x9q2m", "q3-report"], "level": "private"},
)
r.raise_for_status()
print(r.json())
```