Share Tokens

Share Tokens give read-only access to selected RefundSentry surfaces — useful when you want your finance team, fraud-ops contractor, or board to see the dashboard without giving them Shopify staff seats.

What share mode hides

A share-token URL renders the standalone app in read-only mode:

• All action buttons are removed (no tag, hold, deny, block).
• Bulk action toolbar is suppressed.
• Settings, Plan & Billing, and admin surfaces are blocked at the loader level.
• The Networks tab (fraud-ring detection) is hidden because its data endpoint requires standalone auth.

The shared pages — the dashboard, orders, returns, customers, insights — render normally. Recipients see real data, just no way to mutate it.

Creating a token

Open Settings → Plan and data → Shareable report links and click Create share link. You’ll set:

• Label — What the token is for (e.g. “Finance team”). Shown in the list of active links.
• Expiry — 7, 30, or 90 days.

The token is shown in full once when created. Copy it immediately — we don’t store it server-side in a reversible form, so we can’t show it to you again.

Revoking

The Share Tokens card lists every active token with the date issued and the expiry date. Revoke kills the token immediately; any open session using it returns the Share Expired page on the next request.

Premium feature

Share tokens are gated behind paid plans. On trial / free plans the Share Tokens card explains the upgrade path instead of showing the create-token button.

Next steps

• Settings overview — where Share Tokens lives.