Team Workspace

Share captures, Tools rules and Compose requests with your team as links, with credentials removed, optional end-to-end encryption, roles, seats and single sign-on.

Mac iPhone and iPad Android

Team Workspace is where your work goes when someone else needs to see it. Share a capture, a set of Tools rules or a set of Compose requests from WireLens, and your team opens it in a browser at workspace.wirelens.app, or in their own copy of WireLens.

Capture itself stays on your device. Something leaves it only when you share it.

What you need#

Team Cloud, sold per person, or the Team Cloud add-on on keys bought as Team. See pricing.
To share from WireLens: a Mac, iPhone, iPad or Android device signed in to the workspace (see below).
To read in the browser: only an email address and an invitation, or a link shared with Everyone.

A Pro or Team purchase on its own gives you License Manager only.

Enter your work email. If your company has set up single sign-on, you continue at your identity provider (Okta, Microsoft Entra ID, Google Workspace and others). Otherwise we email you a six-digit code. You can also sign in with a passkey. The same account signs you in to License Manager.

A code is sent only to someone who holds a Team Cloud seat, has an invitation waiting, already belongs to a workspace, is on a verified single sign-on domain, or has an open request to join.

Under Account ▸ Sign-in & security, add a passkey or an authenticator app. After that, signing in with an email code also asks for one of them. You get ten recovery codes for when neither is at hand; each works once.

In the apps#

Platform	Where	Needs
Mac	Settings ▸ License ▸ Sign In with Team Workspace…	A Team Cloud seat. Signing in also activates WireLens Pro on that Mac, with no key to paste.
iPhone and iPad	Settings ▸ Team ▸ Team Workspace	A WireLens key that carries Team Workspace, entered at Settings ▸ Appearance ▸ Unlock
Android	Settings ▸ Team ▸ Team Workspace	A Team Cloud key, entered on the Pro screen with Unlock with Key

Choose Sign In with Browser. WireLens opens the Team Workspace sign-in page, where you use your work email, a passkey or your company's single sign-on. Once you're signed in there, the app finishes by itself.

Your Mac's seat#

Signing in gives the Mac a seat from your workspace. It renews every hour the Mac is online and keeps working offline for seven days. The seat is tied to a key only that Mac holds (in its Secure Enclave where it has one) and cannot be copied to another Mac.

To move to a new Mac, sign in there and choose Move to This Mac, or release the old one first under Settings ▸ License.

Limits you can run into:

One seat can pass between at most 3 people in 30 days.
Across the workspace, at most twice the number of seats plus two people can hold a seat in 30 days.
A Mac that checks in from 3 or more countries in 24 hours is signed out with "Signed out after unusual activity on this seat", and asks you to sign in again.

Kind	From	Options
Captures	A selection, the filtered traffic, a host or app in the sidebar, or a session	Remove cookies and Authorization headers (on by default), with Also remove for your own header names
Tools rules	The Tools window, or a tool list on a phone	Which tools to Include, Only rules that are switched on, Remove secrets (on by default)
Compose requests	The Compose window or tab	Which Requests, Remove credentials (on by default), Include each request's last response

Every share also has a Name, Notes and:

Option	Choices
Access	Team only: a teammate signed in to the workspace. Everyone: anyone with the link, with no account.
Auto-delete	Keep until deleted, or after 1, 7, 30 or 90 days
Encrypt end-to-end	Optional. The item is encrypted on your device. The key travels In the link, in the part after `#` that browsers keep to themselves, or as a Passphrase of at least 8 characters that you send separately.

Redaction runs on your device before upload and removes Authorization, Proxy-Authorization, Cookie and Set-Cookie, plus the headers you add. For an imported HAR, its cookie lists are emptied too. A session package (.wirelens) is uploaded as it was exported, with bodies and WebSocket frames. To share one without secrets, export it with File ▸ Export ▸ Redacted Session Package… first.

You get a link such as https://workspace.wirelens.app/l/…. For an end-to-end encrypted item the key follows it as #key=…. Links in the form wirelens.app/l/… work too.

An Admin can turn off Allow sharing with everyone under Security ▸ Sharing. Then every share in that workspace is Team only.

Publish an Update#

A shared Tools rule set or Compose request set can be replaced in place: same link, same name, same access. Choose Publish Update… from the item's menu in the Team Workspace window. Teammates see the revision number go up.

On the Mac#

Share from:

File ▸ Share to Team Workspace ▸ Filtered Traffic…, Tools Rules… or Compose Requests…
A flow's right-click menu, Share ▸ To Team Workspace…
Share to Team Workspace… on a host or app in the sidebar, in the Sessions window, the Tools window and the Compose window

Bring shared items in with File ▸ Import ▸ Session from Team Workspace…, Tools Rules from Team Workspace… or Compose Requests from Team Workspace…, or Import from Team Workspace… in the Tools and Compose windows.

The Team Workspace window is the whole workspace inside the app: shared Logs, Tools and Compose, with Open in Sessions, Import into Tools, Open in Compose, Copy Link and Open in Browser on each item, plus Members, Devices, Seats & billing, Security, Activity, Settings and your Account, as your role allows. Open it with the Team Workspace toolbar button, Settings ▸ License ▸ Open Team Workspace…, or ⌘K and "Team Workspace".

On iPhone and iPad#

Open Settings ▸ Team ▸ Team Workspace to browse and open what your team shared. Share the current capture with Share to Team Workspace in the Traffic tab's ⋯ menu. Each Tools list has Share <Tool> to Team… and Import Rules from Team…, and Compose has Share Requests to Team…, Import Requests from Team… and Share to Team… on a single request.

On Android#

Open Settings ▸ Team ▸ Team Workspace for the Captures, Tools and Compose your team shared. Captures open on the phone. Share the current capture with Share to Team Workspace in the Traffic tab's ⋮ menu, and choose who can open it: Anyone with the link, Only me or Workspace. Remove credentials (on by default) leaves out Authorization, Proxy-Authorization, Cookie and Set-Cookie. End-to-end encrypt puts the key in the link.

Open a shared item#

In the browser, a capture opens in a two-pane inspector: a filterable list, then headers, query, request and response bodies, cookies and timing, with JSON formatting, image previews, Copy as cURL and download. Tools rule sets and Compose requests open in their own viewers. Encrypted items are decrypted in the browser. Developers and Admins can also Upload a capture (a HAR or a .wirelens session package), rules or requests from the browser.
In WireLens, open the link or pick the item from the workspace. A capture opens as its own session, rules go into Tools and requests into Compose. Rules from someone else arrive switched off.

Roles#

Role	Can
Admin	Manage members and invitations, seats, billing, security and settings; see activity; see and manage every shared item
Developer	Share and upload; edit and delete their own items; open what each item's access allows
Viewer	Open what each item's access allows, in the browser, with no license needed

Each Developer holds one of the workspace's Team Cloud seats. An Admin can be given a seat too, to use WireLens on a Mac; an Admin who works only in the browser uses none. Viewers use no seat.

Devices#

Admins see every Mac holding a seat under Devices: whose it is, the model and macOS version, how it signed in, and when it last checked in. Revoke takes Pro away from that Mac the next time it checks in, which is within the hour when it is online. Removing, suspending or making someone a Viewer revokes their Macs too.

Single sign-on and provisioning#

Admins set these up under Security.

Verify a domain. Add the TXT record we show to your DNS, then press Verify. Single sign-on only signs in addresses on verified domains.
Connect your identity provider over SAML 2.0 or OpenID Connect. For SAML, copy the ACS URL and Entity ID into your identity provider and paste its metadata back. For OIDC, register the redirect URI and enter the issuer, client ID and secret.
Test signs you in once. Turn single sign-on on after the test passes.
Optionally turn on Require SSO: everyone on your domains then signs in through your identity provider.
Choose Who joins through SSO: On first sign-in adds new people by themselves, Ask to join (the default) sends a request that an Admin approves under Members, and Invite only admits only people you invite.

Roles from IdP groups map a group in your identity provider to Admin, Developer or Viewer.

SCIM provisioning lets your identity provider add people and take access away. Create a token under Security ▸ SCIM provisioning and enter it with the SCIM base URL in your identity provider. Deactivating someone suspends them and revokes their Macs; unassigning them removes them and frees their seat.

Storage and plan#

Each workspace has 10 GB of storage. A Developer's uploads, including ones in progress, can use up to a quarter of it; Admins have no cap. A Tools or Compose share can be up to 16 MB.
If the Team Cloud subscription lapses, the workspace becomes read-only: members can still sign in, view, download and delete, but not upload or invite. A workspace that stays read-only for 90 days is deleted with everything in it. Its Admins get an email with the date at least 30 days before, and a reminder a week before. Linking Team Cloud seats again keeps it.
For a complete export of the workspace, an Admin emails support@wirelens.app. It holds every shared item in the format it was shared in, the member list and the activity record, in one ZIP file. We email the Admin a download link within 30 days, and it works for the workspace's Admins for 7 days.
Buy more seats in License Manager. Admins see seats in use under Seats & billing.
Admins see sign-ins, invitations, role changes and changes to shared items under Activity.

Security#

Credentials are removed before upload by default.
An end-to-end encrypted item cannot be read by us: the key never reaches our servers.
WireLens talks to Team Workspace outside your own capture, and that traffic stays out of it.

Something here is unclear, or wrong for your setup? Contact support or write to support@wirelens.app.