Tenant context

DealMeld is multi-tenant. Most authenticated endpoints require an explicit tenant context.

Send the tenant ID with:

x-tenant-id: <tenant uuid>

For user JWT requests, the API can sometimes infer a tenant from membership. Public integrations should still send x-tenant-id explicitly. API access keys require it.

Example

curl \
  -H "Authorization: Bearer $DEALMELD_API_KEY" \
  -H "x-tenant-id: $DEALMELD_TENANT_ID" \
  "https://api.dealmeld.io/api/deals"

Permissions

Tenant membership and service-account scopes are both enforced. A valid bearer token is not enough if the user or service account does not have the required resource permission.

Example​

Permissions​

Example

Permissions