Tenants & access

Every resource is scoped to a tenant. API keys, MCP credentials, and webhook subscriptions all carry a tenant scope. Cross-tenant reads are never permitted.

Roles (admin, recruiter, viewer, agent) decide what users and agents can do. Custom scopes can be attached to programmatic keys.