Auto-scoped data
Last updated 2026-06-14
Definition
Auto-scoped data means every query and every stored credential is tied to the active workspace by construction, not by a filter someone has to remember to add. There is no path that reads across tenants, because the scope is built into how Quri stores and fetches. One client can never see another client’s numbers.
How to do this in Quri
- Pick a workspace in /app/accounts so it becomes the active scope.
- Use Quri as normal — metrics, alerts, connectors all read within that scope.
- Switch workspaces to change scope; you never hand-filter to keep clients apart.
- Trust that no view or query can reach data outside the active workspace.
Frequently asked
- How do you guarantee one client can’t see another’s data?
- Scoping is by construction. Every store query and connector credential is keyed to the active workspace, so there is no code path that returns another tenant’s data — even by mistake.
- Is this only a filter on the results?
- No. A filter can be forgotten or bypassed. Auto-scoping is built into how Quri reads and writes, so cross-tenant access is not something a query can accidentally do.