Multi-Tenant Access Control and Organisation Management

A tenant is an organization with its own users, sites, API keys, and webhooks. Data is scoped to the tenant on the access token or API key.

Roles

admin

Users, invitations, API keys, webhooks, sites, and settings.

manager

Sites and operational tools. Not tenant-wide key or webhook admin.

trader

Trading-oriented views and forecast alerts.

viewer

Read-only dashboard and client API when using a key.

Platform superadmins can list and deactivate tenants and users via /api/v1/admin. That is not a tenant role.

Start registration

POST /api/v1/auth/register with email and tenant name.

Verify email

Enter the 6-digit OTP sent to the user.

Complete profile

POST /api/v1/auth/register/complete with password and profile fields.

Admins invite additional users with POST /api/v1/auth/invitations. Invitees accept via a token URL.