> ## Documentation Index
> Fetch the complete documentation index at: https://docs.co-mind.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenant Admin API

> Programmatic access to tenant-scoped administration operations.

The Tenant Admin API surface is used by administrators of a single tenant (workspace) to manage that tenant's users, sub-organizations, keys, and policies.

## Availability

This API is **not currently exposed in the public API reference.**

It powers the tenant administration screens in the Co-mind.ai web application today, and is available through the platform's admin UI. Programmatic access via the HTTP API can be provided on request, scoped to your integration's needs.

## What it covers

* **Tenant management** — read and update your tenant's metadata, usage, and configuration
* **Sub-organizations** — create and manage sub-organizations under your tenant, and their user membership
* **Tenant API keys** — manage tenant-tier provider keys (Tavily, OpenAI, Anthropic, and other cloud model providers) that all members of the tenant share
* **User membership** — approve, reject, suspend, and reactivate users in your tenant
* **Sanitizer policies** — configure PII and prompt-injection sanitization for your tenant
* **Directory sync** — LDAP / Active Directory integration for user provisioning
* **Entra ID (SSO) integration** — configure Microsoft Entra ID for tenant sign-in

## Authentication

All Tenant Admin endpoints require an interactive **session JWT** obtained via `POST /v1/auth/login` from an account with an Admin role in the tenant.

Personal Access Tokens (PATs) are **not accepted** on Tenant Admin endpoints by design — administrative operations are session-scoped and require an interactively-established user session.

## Requesting access

To integrate against Tenant Admin endpoints programmatically, please contact us at [support@co-mind.ai](mailto:support@co-mind.ai). Include a short description of the integration and the operations you need, and we will share the endpoint specification scoped to your use case.