Access

The Access tab controls who can collaborate on your app, whether Riff support can view your workspace, and whether external systems can reach your development API.

The Access tab has three sections, each controlling a different type of access to your app and its workspace.

Collaborators

Shows who can open and edit this app in the App builder. On enterprise accounts, team membership is managed at account level — you can see who has access but cannot add or remove collaborators here.

Support Access

Controls whether the Riff support team can view your workspace.

Default: disabled (private). Your workspace is not accessible to Riff support unless you enable this.

When you need help from Riff support:

1. Click Enable support access

2. A shareable link to your workspace appears — share this with the support team

3. When the session is resolved, click Revoke support access to remove it

Support access is not permanent. Revoke it when you no longer need assistance.

Workspace API

Controls whether external systems can call your development API endpoints.

Default: private. Your development API is not reachable from outside the workspace.

When you need an external service (a webhook, a third-party automation) to call your development endpoints:

1. Click Enable public access

2. The API base URL appears: https://api.riff.new/_projects/{id}/dbtn/devx/app/routes

3. Access expires automatically after 12 hours

4. Click Disable public access to remove it before expiry if needed

This is a development-only feature. Production API access is managed through your deployed app URL.