Mint a new share link covering one or more findings on this scan.

POST 
/v1/scans/:scan_id/shares

The response is the only time the caller sees the bare token and password — both are stored only as hashes. The recipient receives an email with the URL + password.

Request

Responses

201

Share created.

400

Malformed request — missing or invalid fields.

402

Tier limit (concurrent scans, monthly tokens, disk, ...) exceeded.

403

Authenticated, but not allowed (tier / role / ownership).

404

Resource not found or not visible to the caller.