# ReaderGrant

**Kind:** Type

**Source:** [`atloria-monorepo/apps/api/src/reader-access/reader-claims.ts`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/apps/api/src/reader-access/reader-claims.ts#L24)

A3 grant strings recorded in `grants[]` — how the reader got in. The A3 access
seam checks these against the project's current ProjectAccessPolicy.mode.
 - `password`        — entered the shared password
 - `link:<linkId>`   — redeemed an owner share link (universal — bypasses any mode)
 - `email:<domain>`  — verified a 6-digit code for an allow-listed domain
 - `sso:<subject>`   — authenticated via the org IdP in reader mode
 - `member:<userId>` — org staff (informational; member bypass is checked via the member JWT, not this grant)

## Definition

```ts
string
```