# share

URL: /business/nouns/thing/share · Id: `verb:Thing.share` · Call: `await $.Thing.share({ … })` (SDK) or the `do` tool at `https://api.sb/mcp`. Inputs says what to pass, Outputs what returns, When it waits who approves.

> Share grants a person, a Role or a guest Verbs on one record and everything it contains.

Share grants a person, a [Role](/business/nouns/role) or a guest [Verbs](/business/nouns/verb) on one record and everything it contains.

## Inputs
| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `thing` | [Thing](/business/nouns/thing) | Yes | The record to share. |
| `to` | [Party](/business/nouns/party) | Yes | Who receives the grant: a person, or a guest who fills only the `guest` Role. |
| `verbs` | `string[]` | Yes | The Verbs granted, such as `get` and `comment`. |

## Outputs
| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `permission` | [Permission](/business/nouns/permission) | Yes | The grant, scoped to the record and its contents. |
| `thing` | [Thing](/business/nouns/thing) | Yes | The Thing shared. |

## Effects
- Emits [`Thing.shared`](/business/events/Thing.shared).
- Performed by the [Security Engineer](/agents/engineering/security-engineer).
- Two-way: it runs at once, in the `try`, `send` and `do` modes.
- Follows containment Relationships, so sharing a folder shares documents added later.
- Widening a share follows the Approval rule for widening a Role; unsharing applies on the next call.

## Refuses when
| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | [Thing.share](/business/nouns/thing/share) |

## When it waits
| Gate | Default |
| --- | --- |
| Decision class | Low: two-way, nothing at stake |
| [Delay window](/systems/trust-and-governance/controls/one-way-windows) | None: it runs once review passes. |
| Limit | The call [Limit](/business/nouns/limit) of the [Permission](/business/nouns/permission) it runs under. |
| Over the Limit | It waits `pending` for an [Approval](/business/nouns/approval) from the [Founder](/agents/founding/founder). Approved, it runs; refused, it ends `refused` with [`limit-exceeded`](/code/api/errors/limit-exceeded); unanswered by its deadline, it ends `canceled`. |

## Example

**Ask**

```text
Share the latest thing with a party.
```

**API**

```bash
curl -X POST https://api.sb/ledgerlark.com/things/thing_1/share \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"to":"party_1","verbs":["Example verbs"]}'
```

```json
{
  "api": "https://api.sb/ledgerlark.com",
  "permission": {
    "$id": "https://api.sb/ledgerlark.com/permissions/permission_1",
    "$type": "Permission",
    "scope": "Example scope"
  },
  "thing": {
    "$id": "https://api.sb/ledgerlark.com/things/thing_1",
    "$type": "Thing",
    "id": "Example id",
    "type": [
      "noun_1"
    ]
  },
  "action": {
    "$id": "https://api.sb/ledgerlark.com/actions/action_1",
    "operation": "Thing.share",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/ledgerlark.com/actions/action_1"
  }
}
```

**SDK**

```ts
import { $ } from 'startup-builder'

const { permission, thing } = await $.Thing.share({ thing: 'thing_1', to: 'party_1', verbs: ['Example verbs'] })
```

**CLI**

```bash
npx startup-builder do Thing.share --json '{"thing":"thing_1","to":"party_1","verbs":["Example verbs"]}'
```

**MCP**

```json
{
  "name": "do",
  "arguments": {
    "code": "return await $.Thing.share({ thing: 'thing_1', to: 'party_1', verbs: ['Example verbs'] })"
  }
}
```