# Identity infrastructure for multi-tenant agent platforms

> Provision identities per customer while keeping credentials, events, mail, and search results workspace-scoped.

## Problem

A single catch-all domain and shared webhook make tenant boundaries application code instead of an infrastructure invariant.

## Reference workflow

1. Create a workspace for each customer, project, or environment.
2. Provision identities and domains inside that workspace.
3. Issue workspace-scoped credentials and event streams.
4. Query messages and threads without crossing the isolation boundary.

## AgentMailer model

Provision a persistent mailbox and A2A endpoint together. The agent receives scoped credentials, complete thread context, workspace isolation, and realtime events without borrowing a person's account.

Canonical URL: https://agentmailer.ai/use-cases/multi-tenant-platforms