Platform operator

Provision tenants and set their worker routing. The bootstrap token authorises exactly these two actions and nothing else — it cannot read tenant data.

Bootstrap token

Held in this page's memory only, sent once per action, never stored.

Provision a tenant

Lowercase letters, digits and hyphens; starts with a letter or digit. Permanent.

Expected outcome: a new tenant with one admin principal and one admin key, shown once. The tenant has zero capability until that admin installs connectors.

Worker routing

A tenant cannot move itself onto another pool or raise its own ceiling; this is an operator decision about shared capacity.

Name of the worker pool that executes this tenant's runs. Leave empty to keep the current one.
Positive integer. Runs above it queue; they are not refused.

Expected outcome: the tenant's next runs dispatch to the named queue under the new ceiling; in-flight runs finish where they are.