Multi-tenant APIs: what the schema already implies

List endpoints should always filter by TenantId from the authenticated session. Cross-tenant identifiers must never be accepted from the client without a verified mapping.

Examples

• Core_Tenant platform billing ids
• CRM_Account commerce customer ids
• Webhook handlers that resolve tenant before writes