external_ref — your
id for that business — in every path.
Provision
Idempotency
Keyed on(you, external_ref). A repeat returns 200 with the existing
tenant instead of 201 with a duplicate, so a retry after a timeout is safe.
The uniqueness is enforced by the database, not just checked, so two concurrent
requests cannot both win.
Re-provisioning an offboarded tenant revives it rather than returning a
dead record.
Read and list
Update
name, monthly_credit_cap, is_active.
Offboard
Isolation
A tenant belonging to another partner returns 404, never 403. That is
deliberate: a 403 would confirm the id exists, which would let anyone walk a
competitor’s customer list one guess at a time. An id you do not own and an id
that does not exist are indistinguishable to you.
tenants/{external_ref}/ — knowledge,
assistants, tools, channels.
