---
title: "Repair missing read scopes for the authenticated tenant principal"
method: POST
path: "/tenant/account-access/repair"
---

# Repair missing read scopes for the authenticated tenant principal

`POST /tenant/account-access/repair`

## Request

- Base URL: `https://api.gravityads.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.gravityads.dev/tenant/account-access/repair`
- Auth: HTTP bearer

## Response `200`

Tenant principal account access repaired

- object
  - `status` 'tenant_account_access_repaired' | 'tenant_account_access_ready' | 'tenant_account_access_repair_failed' | 'tenant_account_access_repair_unconfigured' | 'tenant_account_access_repair_degraded', required
  - `tenant_id` string, required
  - `principal_resolved` boolean
  - `principal_role_ids` string[]
  - `repair_candidate_count` integer
  - `repaired_account_count` integer, required
  - `remaining_scope_blocker_count` integer, required
  - `repair_limit` integer
  - `selection_changed` false, required
  - `account_status_changed` false, required
  - `system_assignment_changed` false, required
  - `other_user_scopes_changed` false, required
  - `mcp_key_owner_changed` false, required
  - `ai_readiness_summary` object
  - `database_url_configured` boolean
  - `hosted_auth_context` object
  - `raw_account_ids_returned` false, required
  - `raw_user_ids_returned` false, required
  - `raw_secrets_returned` false, required

---

[API](https://skmtc.dev/gravityads/apis/gravityads-api.md) · [All operations](https://skmtc.dev/gravityads/apis/gravityads-api/llms.txt) · [OpenAPI document](https://skmtc.dev/gravityads/apis/gravityads-api/revisions/124cd07d534d?raw)