Sharing Reports
Mint expiring, revocable share links that let anyone open a signed report logged out, and control who can create or revoke them.
Once a report is signed, you can share it with someone who does not have a CallMeter account by minting a share link. A share link opens a branded, logged-out page showing the report's details, its signature status, and a Download PDF button.
Links can carry an expiry and can be revoked at any time, so you stay in control of who can still open a report after you have sent it.
Minting a share link
From the Sign & share panel on any signed report:
- Optionally add a label so you can tell links apart later (for example, "Acme carrier — Q3 review").
- Choose an expiry: 7 days, 30 days, 90 days, or no expiry.
- Select Create link.
CallMeter shows the full link once, at creation time. Copy it then — for security, only a short prefix of each link is stored, so the full URL cannot be shown again afterward. If you lose it, mint a new one and revoke the old.
Minting a link requires the Editor role (or higher) on the project.
What the recipient sees
Opening a share link takes the recipient to a logged-out page that shows:
- The report title and its context (organization, project, test, and — depending on the kind — the endpoint or the compared entities).
- A signature status confirming the report is a signed, integrity-verifiable CallMeter record, with the signing
keyId. - The link's expiry, if one is set.
- A Download PDF button.
- A link to the verification page so the recipient can independently check the file.
The recipient never sees your account, other reports, or any project data beyond the single report you shared.
Managing and revoking links
The Sign & share panel lists every link for a report with its prefix, label, expiry, and view count. There are two levels of revocation:
- Revoke a single link. Stops that one link from opening the report. A link's creator, or any project Admin, can revoke it. Other links to the same report keep working.
- Revoke the whole report. A project Admin can revoke the signed report itself. This immediately disables every share link for that report and flips the verification page to a "revoked" result.
Nothing is ever deleted when you revoke — the report and its links remain as records; they simply stop granting access.
What expired and revoked links look like to a recipient
The public pages fail safe:
| State | The share page shows | Download behaves |
|---|---|---|
| Active | The report details and a working Download PDF button. | Streams the signed PDF. |
| Expired | A message that the link has expired, with the date, and a suggestion to ask you for a new one. | Returns "not found". |
| Link revoked | A message that the link was revoked. | Returns "not found". |
| Report revoked | A message that the report was revoked. | Returns "not found". |
The share page explains why a once-valid link no longer works so the recipient can ask you for a fresh one. The download endpoint, by contrast, simply returns "not found" for any link that isn't fully valid — it never reveals whether a link is expired, revoked, or never existed.
Next steps
- Recipients can confirm a file's integrity themselves — see Verifying Reports.
Signed Reports
Issue a signed, persisted PDF report whose integrity anyone can verify, and understand the four report kinds you can sign.
Verifying Reports
Confirm that a signed report is an unmodified CallMeter-issued record, understand exactly what verification proves, and run the check independently.