Multi-tenancy
How Agent Apps isolates tenants — user secrets, sessions, and instances.
Multi-tenancy
Agent Apps supports multi-tenancy with isolation at multiple levels.
Isolated per tenant
- User secrets — each tenant has their own OAuth tokens and API keys
- Sessions — sessions are scoped per tenant
- Instances — in on-demand mode, each installation gets its own instance
Shared across tenants
- System secrets — shared API keys are the same for all tenants
- Instances — in standalone mode, all tenants share one instance
Choosing a mode for multi-tenancy
| Mode | Tenant isolation | Resource usage |
|---|---|---|
| standalone | Shared instance | Lowest |
| cluster | Session-level | Medium |
| on-demand | Full per-tenant | Highest |
For true multi-tenant isolation, use on-demand mode.
Next steps
- Execution modes — mode reference
- Secrets management — secret isolation