Scopes and tenancy

Understand permissions and the owner scope attached to each request.

Last reviewed October 19, 2026Download Markdown ↓

Scopes

Reads use context:read. Save, remove and data-request commands use content:write. The server rejects missing scopes before the domain operation runs.

Tenancy selector

Use x-genviral-tenancy: personal or an authorized workspace UUID. GET /v1/workspaces (MCP get_context, action workspaces) lists the selectors this credential may use. This selects the owner context; it does not create membership or turn public catalogue evidence into private customer data. Naming a workspace the credential cannot reach returns 403 workspace_not_accessible.

Saved items

Bookmarks belong to the canonical authenticated user and are shared with Genviral. They are private account data and are never copied into the global competitor catalogue.

AI agent or LLM? Read this page as markdown