| Term | Meaning | Where to read next |
|---|---|---|
| Addressed share | A Share link only a named email address or email domain can open; the content is encrypted and the recipient proves who they are. | Share files |
| Bearer link | A Share link that anyone holding the complete URL can read until it expires. | Share files |
| Capability | A scoped permission expressed as a TinyCloud ability string such as tinycloud.kv/get. | Capabilities |
| Capability registry | The generated reference for exact action names, aliases, and statuses from the canonical node registry. | Capability Registry |
| Device login | OpenKey approval on another device, such as a phone, for a CLI or agent session limited to KV access in one space. | CLI authentication |
| Delegation | A signed attenuation of a capability that can be passed to another principal. | Delegations |
| Encryption network | The network-scoped resource used by TinyCloud’s encryption flows. | App manifests and Data Vault |
| Manifest | The app-level request that describes identity, data, and requested capabilities. | App manifests |
| Primary key | The OpenKey key an account uses by default; each key is a separate owner. | OpenKey |
| Owner DID | The persistent DID returned by tc.did after sign-in. | DID Formats |
| Session DID | The ephemeral did:key returned by tc.sessionDid. | DID Formats |
| Space | A user-owned data container with a deterministic ID. | Spaces |
| Storage full | The state where an account’s storage is used up: reads keep working and writes fail with STORAGE_QUOTA_EXCEEDED. | Troubleshooting |
| OpenKey | The external signer that can back TinyCloud sign-in without a browser wallet extension. | TinyCloud Integration |
Terminology
Glossary
TinyCloud terms and where to verify them.
Use this page when you need the TinyCloud vocabulary before you read a guide or verify a capability name.