Skip to main content
A tenant is one of your merchants. You address it by external_refyour id for that business — in every path.

Provision

Idempotency

Keyed on (you, external_ref). A repeat returns 200 with the existing tenant instead of 201 with a duplicate, so a retry after a timeout is safe. The uniqueness is enforced by the database, not just checked, so two concurrent requests cannot both win. Re-provisioning an offboarded tenant revives it rather than returning a dead record.

Read and list

The collection is paginated:

Update

Accepts name, monthly_credit_cap, is_active.

Offboard

A soft offboard. The assistant stops, the data stays, and the tenant remains readable — you can still see its state, and re-provisioning brings it back. Nothing is destroyed by an API call.

Isolation

A tenant belonging to another partner returns 404, never 403. That is deliberate: a 403 would confirm the id exists, which would let anyone walk a competitor’s customer list one guess at a time. An id you do not own and an id that does not exist are indistinguishable to you.
The same rule applies to every path under tenants/{external_ref}/ — knowledge, assistants, tools, channels.