Workspaces
Workspace-scoped data isolation and security settings.
Every API key belongs to one workspace. All agents, policies, MCP servers, audit logs, and approvals are scoped to that workspace.
Security settings
| Setting | Effect |
|---|---|
| require_agent_identity | Policy evaluation requires agent context in input |
| require_execution_proxy | Tool/resource actions must go through /runtime/execute, not evaluate-only |