When you create an app you choose who can use it. That's the app's access mode, and you can always see it on the app's Settings tab. There are four:

Public

Anyone with the link can open and use the app. Pick this for things you want the world to see — a marketing site, a public tool, a demo.

Invite only

The app is closed to everyone except people who sign up through your invite link. You get the link when the app is ready and can share it however you like; it also lives on the app's Settings tab.

If the link leaks, use Rotate link in Settings: the old link stops working immediately, everyone is signed out, and you get a fresh link to share with the right people.

Workspace members

Available on company workspaces. The app is open to exactly the people on your workspace team — no separate list to maintain, no link to share.

• What your team sees. Opening the app takes them to a sign-in page carrying your workspace branding. They sign in with their work email — either a one-time email link or Sign in with Google — and land back in the app. No passwords, nothing to install.
• Managing who's in. Membership is your workspace team, managed in one place: Settings → Team. Add someone there and they can use every members app right away; remove them and their access ends — someone with the app already open may keep it for up to 24 hours before they're asked to sign in again (and can't).
• Need everyone out right now? Use Sign everyone out on the app's Settings tab. Every current session ends immediately; members just sign back in. This is the fast lever when someone leaves and 24 hours is too long to wait.
• Members sign-in works everywhere the app answers — its Ghosty address, preview versions, and any custom domain you've connected.

My own sign-in

The app handles its own accounts: you (or your AI assistant) build the sign-up, sign-in, and permissions inside the app itself. Pick this when your users aren't your teammates — customers, subscribers, a community — and you want full control over the experience.

Changing your mind

The access mode is chosen when the app is created and can't be switched afterwards yet. If an app needs a different one — say a prototype went public and should now be members only — create a fresh app with the right mode and move the code over.