Multi-tenant design
Organization → Tenant → catalog data. Users may access multiple tenants; JWT claims carry the active tenant.
Isolation
| Layer | Isolation |
|---|---|
| Data | Queries scoped by tenant_id |
| APIs | X-Tenant-Id header + token claims |
| MCP | Tools execute in caller’s tenant only |
| AI | Prompts and context limited to tenant catalog |
Enterprise patterns
- One org, brand per tenant (portfolio houses)
- Region per tenant (EU vs US attribute rules)
- Sandbox tenant for integrators and agents