Generate
Only Owners, on the client page. The token is a random 40-character link. No login is required. Regenerating immediately invalidates the previous URL. There is no PIN, expiry, or view log.
What it shows
Agency name, client name, assets, types, dates, days left, and status. It does not show emails, notes, notice addresses, costs, owner/payer, or edit actions.
Revoke
Turn the link off or regenerate it on the same screen. A blocked workspace returns 404 for the public page. Treat the URL as secret: anyone who has it can open it.