tenants:write
scope, except the two reads.
Create a workspace
The answer is
201 with the workspace in data: id, name, externalId,
suspendedAt and createdAt. Its id and your externalId both work in
X-Clustr-Tenant.
All calls
A delete cannot be undone. A
tenant.deleted webhook is sent. Your default workspace, the one your team signs in to, cannot be deleted: the call answers 409.
In MCP
Organization admins have the same operations as tools:org_list_tenants,
org_create_tenant, org_get_tenant, org_update_tenant, org_suspend_tenant,
org_resume_tenant and org_delete_tenant. They take the workspace as id or
external_id.
Sign-in domains
Organization admins can let people join by email domain, through the app or MCP.org_get_sign_in_settings lists the domains and their status. org_add_domain starts
verification and returns the DNS TXT record to publish. org_verify_domain checks it.
Once a domain is verified, anyone who signs in with an email on it joins the
organization. org_remove_domain takes a domain off.