Casinos

Tenants, and the API keys issued for them.

📄️The API key scope vocabulary

Flat, not nested per casino — it is the same list for every one.

**The one collection reachable without `X-Tenant-Id`.** It is what draws the

**Super-user only**, and it takes no `X-Tenant-Id`: the casino being created

**Super-user only, and irreversible.** Every child row cascades: memberships,

**The id in the path must be the casino in `X-Tenant-Id`** — a mismatch is a

Suspending makes every server-to-server request from that casino answer `403`

**Never returns key material** — only the stored prefix, the scopes, the

**The plaintext key is in this response and nowhere else, ever.** Only its

Immediate — there is no cache to wait out.