Workspaces

Understanding workspace isolation and data scoping

What is a Workspace?

A workspace is your organization’s isolated environment in Orwel. All data, API keys, and resources are scoped to a single workspace, ensuring complete data isolation.

Automatic Scoping

Every API request is automatically scoped to your workspace based on the API key used. You can only access data that belongs to your workspace.

// All requests are automatically filtered by workspace_id
const leads = await fetch('/api/v1/leads', {
  headers: { 'Authorization': 'Bearer YOUR_API_KEY' }
});
// Returns only leads from your workspace

Workspace ID

Your workspace ID is included in every API response header:

X-Workspace-Id: 770e8400-e29b-41d4-a716-446655440002

Data Isolation

Complete Isolation

Cross-workspace data access is strictly prohibited. You cannot access another workspace’s data, even if you know the resource ID.

API Key Binding

Each API key is bound to a single workspace. Keys cannot be shared across workspaces.