Authentication & tenants
Every request is scoped to a workspace. Service accounts and user sessions are issued from the tenant app.
- Bearer tokens for server-to-server calls
- Workspace ID in path or header—no cross-tenant leakage
- Rotate credentials from Developer Settings