Update tenant settings
Merges the provided settings into the existing tenant settings. Keys that gate a governance control (agent_licence_mode, maker_checker_enforced, source_retention_months, feedback_retention_days) may only be changed by a verified human principal; an API key receives 403 HUMAN_PRINCIPAL_REQUIRED, and the change is recorded in the audit chain. All other keys are unaffected.
source_retention_months is a whole number of months and must be at least 12, the platform minimum. There is no maximum. It RECORDS how long this tenant asks MeshQu to keep exact source bytes; nothing in this release deletes an object when a window elapses, so it is a recorded setting and not yet an enforced one.
feedback_retention_days is a whole number of days between 30 and 730; the default when unset is 90. A value outside those bounds is refused with 400 rather than clamped. It governs authoring-feedback telemetry only, on a separate clock from the source-byte setting above and in the opposite direction: shortening it brings every existing unexpired row forward, measured from that row’s own creation time, and lengthening it applies only to rows created afterwards and never extends an existing one.
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.
Body
Response
Default Response