What tenants give you
- Data isolation. Row-Level Security in the database ensures you cannot see another tenant’s data under any circumstances. This is enforced at the database layer, not in application code.
- Independent credentials. API keys, agent tokens, webhook endpoints, and team members are scoped to your tenant.
- Independent billing. Usage is aggregated per tenant.
- Independent environments. Each tenant has its own
testandliveslices of data — agents you create in test are never visible to live, and vice versa.
Tenant identity
Every authenticated request resolves to atenantId. You can read it back from GET /v1/context:
Managing the tenant
Organization-level operations live at/v1/organization/*:
- Members — invite, remove, change roles (
owner,admin,member,viewer) - Protocols — enable/disable agentic commerce protocols for your tenant
- Compliance — KYB status, license docs, beneficial ownership
What you do NOT see across tenants
- Accounts, agents, wallets belonging to other tenants
- Transfers where your tenant isn’t party
- Webhook deliveries for other tenants
- Events, exports, reports
