1ORGANIZATIONtenant identity · gatewayREVOKE PUSH ● LIVE--:--:--
- Name
- Acme AI Platform
- Tenant ID
t_acme_01- Auth
- Clerk · auth + orgs
- Gateway
prysm-gateway.internal- API mode
- Live · WS2 gateway
- Region
- iad · ord failover
2KEYS & TOKENSlast4 + fingerprint only — plaintext never stored5 active · 1 revoked
| Type | Label | Principal | Last4 | Fingerprint | Created | State | Revoke |
|---|---|---|---|---|---|---|---|
| PROVIDER KEY | anthropic · prod | — | ••••9f21 | 3e:9a:c4:71 | 2026-06-14 | ● ACTIVE | |
| PROVIDER KEY | openai · fallback | — | ••••4c7d | a1:07:5e:22 | 2026-06-18 | ● ACTIVE | |
| GATEWAY TOKEN | prod-app | support-copilot | ••••b8e0 | 7c:1a:ef:44 | 2026-06-14 | ● ACTIVE | |
| GATEWAY TOKEN | rsvp-worker | event-scheduler | ••••7b3e | 90:c4:7b:e3 | 2026-06-20 | ● ACTIVE | |
| GATEWAY TOKEN | bumper | followup-bot | ••••c41a | 41:b9:e6:a2 | 2026-06-15 | ■ REVOKED | REVOKED |
| GATEWAY TOKEN | debrief | meeting-summarizer | ••••d05f | 04:e7:ab:62 | 2026-06-22 | ● ACTIVE |
provider keys envelope-encrypted · tokens stored as SHA-256 hash + prefix — revocation is instant at the gatewaymint a token ➜
3TEAM & ownerswho can mint, revoke, and kill4 members
| Member | Role | Agents Owned | Live Now | Kill Rights |
|---|---|---|---|---|
| dana@acme.example | owner | 7 | ● 3 | ■ fleet-wide F8 |
| ops@acme.example | admin | 4 | ● 2 | ■ fleet-wide F8 |
| sam@acme.example | member | 2 | ● 1 | own agents only |
| chris@acme.example | member | 1 | ● 1 | own agents only |
membership syncs from the Clerk organization · roles govern who can arm the kill switch
4ENFORCEMENT & DATA PLANEfail-mode · raw-body logging
Fail mode
If the control plane is unreachable, do calls pass or halt? Fail-closed keeps enforcement absolute — an outage blocks rather than leaks.
● FAIL-CLOSED — enforcement absolute
Raw request-body logging
Off by default — only the metadata envelope crosses to the control plane. Enable to also persist request/response bodies, which leaves your data plane.
⛨ OFF — bodies stay in your data plane