Access

Control who can collaborate on your project, whether Riff support can view your workspace, and whether external systems can reach your development API.

The Access tab controls three types of access to your project workspace. Available in both the App builder and Agent builder via the + button.

Collaborators

Shows who can open and edit this project. On enterprise accounts, team membership is managed at account level.

Support Access

Controls whether the Riff support team can view your workspace.

Default: disabled. Your workspace is private to your team.

To get help from Riff support:

1. Click Enable support access

2. A shareable workspace link appears — send this to the support team

3. Click Revoke support access when the session is resolved

Workspace API

Controls whether external systems can call your development API endpoints.

Default: private. Your development API is not reachable from outside the workspace.

To allow an external service (a webhook, an automation tool) to call your development endpoints:

1. Click Enable public access

2. The API base URL appears: https://api.riff.new/_projects/{id}/dbtn/devx/app/routes

3. Access expires automatically after 12 hours

4. Click Disable public access to remove it earlier if needed

Native user authentication for deployed apps (email/password login, session management) is configured separately. See Native Authentication.