Publishing a WFS
A WFS lets people see part of a cloud project, live, without the app: in a web map, in QGIS or ArcGIS, or in any OGC client. It is read only: nobody changes the data through it.
Publishing one
The admin and managers publish. Open a cloud project from Content; it needs a release first, because until then there is nothing to publish. Choose Publish as WFS and pick what goes out: the whole project, one layer as it is, or one layer with only the fields you tick. A field added to the layer later is published by the first two, and by the third only once you tick it.
Include attachment names is off unless you tick it. It adds how many photos and videos each feature has and their file names; the files themselves stay on the phones that took them.
The WFS appears on Content, private to you until you share it. It follows the project: when a sync changes a published layer, the WFS updates within seconds. Publishing is refused while the organisation is at its storage limit.
On its page
Rename it (its addresses stay the same), add Metadata that GIS programs show (an abstract, keywords, attribution, a licence, access constraints and a contact), and Connect to copy its two addresses, OGC API Features and WFS 2.0.
Somebody outside the organisation
People in your organisation read a WFS once it is shared with them. For somebody outside it, make an access token: it goes in the address, so QGIS or ArcGIS Online connect with a paste. A token opens only this WFS, only to read, for 30 days, 90 days, 6 months or 1 year, as you choose, and you can show, rotate or revoke it at any time.
Each live token takes one of the organisation’s viewer places, as a viewer does, and revoking it frees the place. A WFS’s tokens are managed by its owner, a manager or the admin. Seats, viewer places and storage.
Unpublishing
Unpublish removes the WFS and its addresses stop answering. It is refused while a web map uses it: the page lists those maps, so you can take the layers out of them first. The cloud project itself is not touched.
What this does not do
A WFS is read only, and it is never published to the whole internet: it reaches the people you share it with and the holders of its tokens. A WFS is a copy of only what you chose, kept apart from the project; that copy is not encrypted the way the project is. Where it is kept explains why.