Workspace & Security Settings
Tenancy configuration, integration credentials, and security controls.
Workspace Profile
Security & Encryption at Rest
AES-256-GCMIntegration Credential Encryption
All third-party OAuth tokens and secrets encrypted with unique IVs.
Signed Webhooks (HMAC SHA-256)
Inbound Store and provider webhooks require verified digital signatures.
Tenant Data Isolation
Strict workspaceId scoping across all database queries and MCP tools.
Engine Baseline Stack
Framework
Next.js 14
ORM
Prisma 6
Protocol
MCP v1
Styling
Tailwind CSS