Version: 0.1.0

Bryn Control Plane API

Tenant-scoped REST API for the Bryn Control Plane, authenticated with Civic Auth bearer tokens.

The JWT identifies the caller, not the tenant. The API resolves the active tenant from the caller's memberships: with a single membership the tenant is implicit; with more than one, send an X-Bryn-Tenant: <tenantId> header naming one of them.

Authentication

HTTP: Bearer Auth

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT