Restrict who can view a demo (allow and block lists)

Walnut lets you control exactly who can open a published demo by maintaining an allow list and a block list of viewer emails or domains. You can manage these lists per demo in its Share settings, and set a company-wide default in Company Settings.

Overview

By default, access to a demo is governed by your demo access settings (for example, "anyone with the link" or "specific viewers"). On top of that, allow and block lists give you fine-grained control over which email addresses or domains are permitted to view a demo:

• Allow list — only the listed viewers can open the demo; everyone else is denied. Use it to restrict a demo to specific customers or internal teams.
• Block list — the listed viewers are denied; everyone else can view. Use it to keep out competitors or specific domains.

You can add either individual email addresses (for example, jane@acme.com) or whole domains (for example, @acme.com) to either list.

Reviewer note

Confirm the exact in-product labels and menu paths (Share settings / access controls) against the live app before publishing — the labels below are described generally and may differ slightly in the UI.

---

Set Access for a Single Demo

Each demo can carry its own allow and block lists, which override or add to your company defaults for that demo.

1. Open the demo you want to restrict.
2. Go to its Share settings.
3. Find the access controls where you can manage the allow list and block list.
4. Add the viewer emails or domains you want to allow or block.
5. Save your changes.

The lists take effect for that demo's shared link.

Emails vs. domains

Add a full email address (jane@acme.com) to allow or block one person, or a domain (@acme.com) to cover everyone at an organization.

---

Set a Company-Wide Default

Admins and Account Owners can maintain workspace-wide allow and block lists that apply to every demo automatically, so you don't have to configure access on each demo individually.

1. Go to Company Settings → Account settings → Demo access control.
2. Locate the allow and block lists.
3. Add the emails or domains you want to allow or block across all demos.

Only Admins and Account Owners can edit the company-level lists.

For the full set of related workspace access controls, see Company Settings.

---

Bulk Upload with CSV

To set up a long allow or block list quickly, you can use a CSV bulk upload so you can import many emails or domains at once instead of entering them one by one. This is rolling out gradually and may not be available in your workspace yet.

---

FAQs

What happens if a viewer is on both lists?

Reviewer to confirm precedence in the live app before publishing. Typically a block takes priority, but verify the exact behavior.

Can I use these lists together with "collect viewer email"?

Yes. Allow and block lists work alongside your other demo access settings, such as gating the demo behind a viewer email. See Company Settings for the related toggles.

Who can edit the lists?

Anyone with access to a demo's Share settings can manage that demo's lists; the company-wide default lists can only be edited by Admins and Account Owners.