---
title: "website.share.connect · OpenVibe.Services"
canonical: "https://openvibe.services/docs/capabilities/website.share.connect"
updated: null
---

# website.share.connect · OpenVibe.Services

HTML: [website.share.connect · OpenVibe.Services](https://openvibe.services/docs/capabilities/website.share.connect)

# `website.share.connect`

Generated at 2026-11-13 06:25:48 UTC from [`openvibe-contracts v0.419.0`](https://github.com/OpenVibers/OpenVibe.Contracts/tree/v0.419.0) and [`openvibe-sdk v0.161.0`](https://github.com/OpenVibers/OpenVibe.SDK/tree/v0.161.0).

Not grantable to apps (planned, first-party).

PLANNED for OpenVibe.Website Connect (audience openvibe.website, link principal): a Link opens one share's tunnel with POST /api/v1/shares/:id/tunnel and a website.share-connect-request@1. The edge checks the Network Link token (client credentials, subject link:lnk\_…, audience openvibe.website) and the short-lived, single-use tunnel token minted by Connect; neither alone opens the route. The Link token's subject must equal link:<node\_id> from the request, and a mismatch is refused and audited. Not delegated to user or app tokens.

- Owner: connect (token audience `openvibe.connect`)
- Version: 1.0
- Status: planned
- Visibility: first-party
- Resource constraints: owner, project
- Quota class: website-tunnel
- Permissions: website:tunnels:connect
- Input: [website.share-connect-request@1](/docs/contracts/website.share-connect-request)
- Output: website.share@1
- Events: website.share.activated
- Implemented by: - `POST /api/v1/shares/:id/tunnel`

[These routes in the API explorer](/docs/api/connect#cap-website.share.connect)