Sharing an Agent's Filesystem
This guide explains how to let a teammate see or work with the files an agent has saved. There is no separate sharing step for the filesystem — sharing the agent is sharing the filesystem.
Before you begin
- You must be a workspace admin, the agent's owner, or someone with admin-level access to the agent. Only admins can manage permissions on the resources page.
- The person you want to share with must already be a member of the same workspace. If they are not, ask your workspace admin to invite them first.
- Access takes effect immediately. The recipient does not need to sign out and back in.
How access flows
Every agent has a list of people and groups who have been granted one of four relations on it: Viewer, Can Execute, Editor, or Admin. When the agent has a filesystem, that same list and those same relations determine who can work with the files. You do not configure the filesystem separately.
| Relation on the agent | Can see the agent | Can chat with the agent | Can ask the agent to read files | Can ask the agent to create or edit files | Can turn the filesystem on or off |
|---|---|---|---|---|---|
| Viewer | Yes | No | Yes | No | No |
| Can Execute | Yes | Yes | Yes | Yes | No |
| Editor | Yes | Yes | Yes | Yes | Yes |
| Admin | Yes | Yes | Yes | Yes | Yes |
Note that "ask the agent to create or edit files" means starting a chat with the agent and telling it to save something. The agent does the writing on your behalf. Nobody writes directly to the file store — the agent is always the one making the change.
Steps
1. Open the workspace permissions page
From the main menu, go to Workspace and then Permissions. The permissions page has several sub-sections in the sidebar on the left. Click the Resources section.
2. Find the agent you want to share
The Resources page lists every resource in your workspace — agents, documents, tools, sandcastles, and more — grouped by type. Use the search field at the top to filter by name, or use the Type filter dropdown to limit the list to Subagent so only agents are visible. Click the agent you want to share. Its current permissions appear on the right.
If the agent does not appear in the list, check the following:
- You may not be a workspace admin. Only workspace admins can see every resource on this page. Ask your workspace admin to grant you admin access or to share the agent on your behalf.
- You may be signed in to a different workspace. Agents are scoped to a single workspace. Switch workspaces and try again.
3. Add a person or group
Click Add permission (or the equivalent button on the permissions panel). A small form appears with three fields:
- A search field for the person, group, or agent you want to grant access to. Start typing a name and select from the dropdown.
- A Relation dropdown with four options: Viewer, Can Execute, Editor, and Admin. Pick the level that matches what you want the recipient to do.
- A Grant or Add button that commits the change.
Pick the relation based on how the recipient will work with the agent:
- Viewer — they can see the agent and browse its file list through the agent, but they cannot start a new chat with it or ask it to save anything. Use this if you want someone to read-only audit the files.
- Can Execute — they can chat with the agent, which means they can ask it to read, search, write, rename, copy, and delete files during a conversation. Use this for most collaborators who need to actually work with the agent day to day.
- Editor — everything Can Execute allows, plus they can change the agent's configuration including turning the filesystem on or off. Use this only for trusted co-maintainers.
- Admin — full control, including the ability to delete the agent and re-share it with others.
Most of the time, Can Execute is the right level. Save Editor and Admin for collaborators who are co-maintaining the agent.
4. Confirm the change
The new permission appears in the agent's permissions list immediately. The recipient can open the agent, start a new chat, and interact with its files on their next request. There is no email notification — if you want them to know, send them a link to the agent yourself.
What the recipient sees
Once they have access at Can Execute or higher, the recipient can:
- Find the agent in the agent list and open it.
- Start a new chat and ask the agent to read, write, search, rename, copy, or delete files.
- Ask the agent to generate a temporary download link for a file so they can share it outside of the chat.
They cannot:
- Directly browse or edit the file store without going through the agent. There is no separate file browser.
- See files that belong to a different agent, even if they have access to that other agent. Files are scoped to the specific agent that created them.
- Re-share the agent with additional people unless they have Admin.
- Turn the filesystem on or off unless they have Editor or Admin.
Revoking access
Open the same Workspace → Permissions → Resources page, find the agent, and remove the person or group from its permissions list. Revocation takes effect immediately. On their next message, the server denies access and the agent disappears from their list.
Revoking does not delete any files. The agent still has them; the person you revoked simply can no longer see them.
Sharing files outside the workspace
There is no "share this file" button. The closest equivalent is to ask the agent, while you are in a chat with it, to generate a temporary download link for a specific file. The agent returns a link valid for a short window (up to one hour). You can paste that link in an email, chat, or anywhere else.
The link does not require the recipient to sign in. Treat it like a password — do not post it in a public channel, and do not assume it is still valid after the expiry time. If the agent edits the file after you generated the link, the link still points at the older version until you generate a new one.