What if I sent a magic link to the wrong person — can I invalidate it?

Yes. You can rotate the link for any client, which invalidates the previous one and issues a fresh access link. The old link no longer works, so anything sent to the wrong address or forwarded by mistake is cut off.

Pair this with the per-client disable access toggle and you have full control: rotate to re-secure access, or disable entirely to shut it down. Both act immediately.