---
title: "Create a vault share"
method: POST
path: "/vault/{id}/shares"
tags: ["Vaults"]
---

# Create a vault share

`POST /vault/{id}/shares`

Grant another organization read-only access to this vault. Only the vault owner can create shares. Idempotent: re-sharing to the same org updates the existing share.

## Path parameters

- `id` string, required

## Request body

- object
  - `target_org_id` string, required — The organization ID to grant access to
  - `permission` 'read' — Permission level (only "read" is supported currently)
  - `expires_at` string, date-time, nullable — Optional expiration timestamp for the share

## Response `200`

Share created or updated successfully

## Other responses

- `400` — Invalid request
- `401` — Invalid API key
- `403` — No vault access or not the vault owner
- `404` — Vault not found

---

[API](https://skmtc.net/casemark/apis/case-dev-api.md) · [All operations](https://skmtc.net/casemark/apis/case-dev-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/casemark/case-dev-api/versions/5b7e64e6d6f9/schema)