Site sharing

Share a site

Shares one of the member’s sites with an audience: one member, the member’s downline, or a segment of the company’s members by member type and country. Sharing an audience that is already shared writes nothing and returns the share that exists, with 200 instead of 201; its permission is not changed, so change it with PATCH.

Sharing is checked against the company’s messaging policy when it is made: a member, or an audience, outside the audiences the policy lets the member reach is refused with 403 and its reason. Sharing with oneself, with a member of another company, with an unknown member type or country, or with a target the audience kind does not take is refused with 422. A request that loses a race with another change to the site’s shares, and finds no share for the audience afterwards, is refused with 409: send it again.

A bearer with write access only: a request on the cookie mount is refused with 403, with or without an X-Fluid-Member-Site header, and so is a member or portal JWT.

POST

api

member

v2026-10

sites

{site_id}

Share a site

curl --request POST \
  --url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "audience_kind": "member",
  "member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11",
  "permission": "view"
}
'

import requests

url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares"

payload = {
    "audience_kind": "member",
    "member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11",
    "permission": "view"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    audience_kind: 'member',
    member_id: '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11',
    permission: 'view'
  })
};

fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'audience_kind' => 'member',
    'member_id' => '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11',
    'permission' => 'view'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares"

	payload := strings.NewReader("{\n  \"audience_kind\": \"member\",\n  \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11\",\n  \"permission\": \"view\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"audience_kind\": \"member\",\n  \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11\",\n  \"permission\": \"view\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"audience_kind\": \"member\",\n  \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11\",\n  \"permission\": \"view\"\n}"

response = http.request(request)
puts response.read_body

{
  "status": 200,
  "data": {
    "id": "0192f4e5-8a01-7b8c-9d0e-1f2a3b4c5d01",
    "audience_kind": "member",
    "member": {
      "id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11",
      "name": "Nathan Cho"
    },
    "member_type": null,
    "country": null,
    "label": "Nathan Cho",
    "permission": "view",
    "created_at": "2026-09-01T10:00:00.000000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 201,
  "data": {
    "id": "0192f4e5-8a01-7b8c-9d0e-1f2a3b4c5d04",
    "audience_kind": "segment",
    "member": null,
    "member_type": {
      "id": "0192f4e5-2b01-7b8c-9d0e-1f2a3b4c5d21",
      "name": "Customer"
    },
    "country": null,
    "label": "Customer",
    "permission": "view",
    "created_at": "2026-09-30T15:08:21.000000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 403,
  "error": {
    "message": "Your company's messaging policy does not let you share with this audience",
    "details": {
      "error": "outside_messaging_scope",
      "audience_kind": [
        "member"
      ]
    }
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 409,
  "error": {
    "message": "The site is being changed, try again",
    "details": {}
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization

string

header

required

A member credential in the Authorization: Bearer header: a member session JWT, a portal JWT whose login is linked to a membership in that company, an opaque member token, or a verified One Auth identity access token. The credential alone identifies the member and company. Member session and portal JWTs are read-only and are refused with 403 on every write.

Path Parameters

site_id

string<uuid>

required

Public id of one of the member's sites.

Body

application/json

Share a site with one audience. Each audience kind takes its own targets, and sending a target the kind does not take is refused with 422.

audience_kind

enum<string>

required

Who to share with. A member share needs member_id and takes no other target. A downline share takes none. A segment share takes member_type_id, country_code, both or neither, and neither shares with every member the company's messaging policy lets you reach.

Available options:

member,

downline,

segment

member_id

string<uuid>

Id of the member to share with. A member of another company is refused with 422.

member_type_id

string<uuid>

Id of the member type of a segment.

country_code

string

ISO 3166-1 alpha-2 code of the country of a segment, one of the countries the company sells in.

Required string length: 2

permission

enum<string>

default:view

What the audience may do with the site. Ignored for an audience that is already shared; change it with PATCH.

Available options:

view,

copy

Response

The audience was already shared, so this is the share that exists, unchanged.

One share.

status

integer

required

HTTP status code (mirrors the response status line).

data

object

required

One audience a site is shared with. It never carries an email address.

Show child attributes

meta

object

required

Envelope metadata present on every response.

Show child attributes

Share a site

curl --request POST \
  --url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "audience_kind": "member",
  "member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11",
  "permission": "view"
}
'

import requests

url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares"

payload = {
    "audience_kind": "member",
    "member_id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11",
    "permission": "view"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    audience_kind: 'member',
    member_id: '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11',
    permission: 'view'
  })
};

fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'audience_kind' => 'member',
    'member_id' => '0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11',
    'permission' => 'view'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares"

	payload := strings.NewReader("{\n  \"audience_kind\": \"member\",\n  \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11\",\n  \"permission\": \"view\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"audience_kind\": \"member\",\n  \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11\",\n  \"permission\": \"view\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/shares")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"audience_kind\": \"member\",\n  \"member_id\": \"0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11\",\n  \"permission\": \"view\"\n}"

response = http.request(request)
puts response.read_body

{
  "status": 200,
  "data": {
    "id": "0192f4e5-8a01-7b8c-9d0e-1f2a3b4c5d01",
    "audience_kind": "member",
    "member": {
      "id": "0192f4e5-1a01-7b8c-9d0e-1f2a3b4c5d11",
      "name": "Nathan Cho"
    },
    "member_type": null,
    "country": null,
    "label": "Nathan Cho",
    "permission": "view",
    "created_at": "2026-09-01T10:00:00.000000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 201,
  "data": {
    "id": "0192f4e5-8a01-7b8c-9d0e-1f2a3b4c5d04",
    "audience_kind": "segment",
    "member": null,
    "member_type": {
      "id": "0192f4e5-2b01-7b8c-9d0e-1f2a3b4c5d21",
      "name": "Customer"
    },
    "country": null,
    "label": "Customer",
    "permission": "view",
    "created_at": "2026-09-30T15:08:21.000000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 403,
  "error": {
    "message": "Your company's messaging policy does not let you share with this audience",
    "details": {
      "error": "outside_messaging_scope",
      "audience_kind": [
        "member"
      ]
    }
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 409,
  "error": {
    "message": "The site is being changed, try again",
    "details": {}
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-09-30T15:08:21Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Overview

Storefront

Commerce

Checkout

Member API

Messaging

People

Payments

DAM

Website

Portal

Mobile app

Content and tools

Analytics

Sales channels

Settings

FairShare SDK

Droplets

Developers

Unsorted endpoints

Portal & Widgets

Share a site

Authorizations

Path Parameters

Body

Response