`PATCH /v1/admin/tenants/:id`

Auth: admin — _Status:_ stable

Update a tenant. The only mutable field today is disabled.

Request

Path param	Type	Description
`id`	int	Tenant id.

Body

Field	Type	Description
`disabled`	boolean	Set `true` to block new requests from this tenant (`401` on the orchestrate path).

curl -X PATCH \
  -H "Authorization: Bearer adm_…" \
  -H "Content-Type: application/json" \
  -d '{"disabled":true}' \
  http://arbiter.example.com/v1/admin/tenants/3

Response

200 OK

The updated Tenant object. Flipping disabled=true immediately cancels every in-flight orchestration for the tenant (the kill switch is hot, not advisory).

A successful update appends an update_tenant row to the admin audit log with before={disabled: <prior>} and after={disabled: <new>} so the change is auditable after the fact.

Failure modes

Status	When	Body
400	Invalid JSON.	`{"error": "..."}`
401	Missing / invalid admin bearer.	`{"error": "..."}`
404	Id doesn't exist.	`{"error": "tenant not found"}`
503	Admin not configured.	`{"error": "admin not configured"}`

PATCH /v1/admin/tenants/:id