Skip to main content
Share boards and saved metrics with anyone via a unique URL — no login required. Share links are useful for embedding dashboards in wikis, sending reports to stakeholders, or making specific metrics publicly accessible.

​
For a board

curl -X POST https://your-tell-server/api/v1/boards/{board-id}/share \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Workspace-ID: ws_abc123"

​
For a saved metric

curl -X POST https://your-tell-server/api/v1/metrics/saved/{metric-id}/share \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Workspace-ID: ws_abc123"
Both return: 
{
  "hash": "a1b2c3d4e5f6",
  "url": "https://your-tell-server/s/b/a1b2c3d4e5f6",
  "expires_at": null,
  "created_at": "2025-06-15T10:00:00Z"
}
Only the board/metric owner or an Admin can create share links. Each resource gets one share link at a time — creating a new one replaces the old one.

​
View a shared resource

Anyone with the link can view the shared content without logging in: 
# Shared board
curl https://your-tell-server/s/b/{hash}

# Shared metric
curl https://your-tell-server/s/m/{hash}
Shared views return the content (title, description, settings/query) without any owner or workspace information. 
# For a board
curl https://your-tell-server/api/v1/boards/{board-id}/share \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Workspace-ID: ws_abc123"

# For a saved metric
curl https://your-tell-server/api/v1/metrics/saved/{metric-id}/share \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Workspace-ID: ws_abc123"
Returns 404 if no share link exists. 
# For a board
curl -X DELETE https://your-tell-server/api/v1/boards/{board-id}/share \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Workspace-ID: ws_abc123"

# For a saved metric
curl -X DELETE https://your-tell-server/api/v1/metrics/saved/{metric-id}/share \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Workspace-ID: ws_abc123"
Once revoked, the public URL immediately stops working.

​
Security

  • Share URLs use a random hash — they can’t be guessed or enumerated
  • Public share endpoints are rate-limited to 60 requests per minute to prevent brute-force scanning
  • Shared views strip owner and workspace information from the response
  • Expired links return 404
  • All share creation and revocation events are audit logged

​
Permissions

ActionRequired role
Create share linkOwner (Editor+) or Admin
View share link statusOwner or Admin
Revoke share linkOwner or Admin
View shared contentAnyone with the URL

​
What’s next