# Overview

## Tenant

Sovereignty boundary readback + tenant-scoped config (get tenant; list + upsert entries routed to the env / secrets bindings). There is no `/v1/tenants` collection — the caller’s tenant is implicit from the bearer token. `PATCH /config` routes writes to `SecretBinding` when `sensitive: true` OR `kind: "secret"`; else to `EnvBinding`. `GET /config` merges both bindings at tenant scope; secret values are ALWAYS redacted here. The `/config` sub-routes mount when at least one of `envBinding` / `secretsBinding` is wired. Prefer `/v1/env/*` + `/v1/secrets/*` for new callers.

## Operations

GET

[/v1/tenant](https://docs.kindgi.com/v0.1.8/reference/api/operations/tenantget.md)

GET

[/v1/tenant/config](https://docs.kindgi.com/v0.1.8/reference/api/operations/tenantconfiglist.md)

PATCH

[/v1/tenant/config](https://docs.kindgi.com/v0.1.8/reference/api/operations/tenantconfigupsert.md)