---
title: "List a session's shares"
method: GET
path: "/sessions/{sessionId}/shares"
tags: ["Sessions"]
---

# List a session's shares

`GET /sessions/{sessionId}/shares`

List everyone a session is shared with **read-only** — both registered recipients and pending email invitations. Reports and systematic reviews can also have editors or reviewers added in the Elicit web app; those higher-permission collaborators are managed there and are not returned here. Only the session owner can list shares.

### Example

```bash
curl https://elicit.com/api/v2/sessions/{sessionId}/shares \
  -H "Authorization: Bearer elk_live_your_key_here"
```

## Path parameters

- `sessionId` string, uuid, required — The session ID (UUID) returned by the create endpoints and `GET /sessions`

## Response `200`

The session's current read-only shares.

- ListSessionSharesResponse
  - `sessionId` string, required — Unique identifier for the session.
  - `shares` SessionShare[], required — Everyone the session is currently shared with — both registered recipients and pending email invitations.
    - `email` string, required — Email address the session is shared with.
    - `status` 'registered' | 'invited', required — "registered" when the recipient already has an Elicit account and can read the session now; "invited" when a pending invitation was created for an email without an account.
    - `role` 'reader', required — Access level of the share. Sessions are always shared read-only.
  - `url` string, required — URL to view and continue the session in the Elicit web interface.

## Other responses

- `401` — Authentication failed. The API key is missing, invalid, revoked, or expired.
- `403` — API access is not available on your current plan. Upgrade to Pro or above to use the API.
- `404` — Session not found. The session ID is invalid or belongs to a different user (or, for an agent session, the Research Agent API is not enabled for this account).
- `429` — Rate limit exceeded. More than 100 requests per minute were received from your IP address; further requests are blocked for 5 minutes.
- `500` — An unexpected error occurred. Retry after a short delay.

---

[API](https://skmtc.dev/elicit/apis/elicit-api.md) · [All operations](https://skmtc.dev/elicit/apis/elicit-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/elicit/elicit-api/revisions/2b42624536e5/schema)