---
title: "The org's white-label configuration"
method: GET
path: "/api/v1/tenant-config"
tags: ["tenant"]
---

# The org's white-label configuration

`GET /api/v1/tenant-config`

## Request

- Base URL: `https://worthune.com`
- URL: `https://worthune.com/api/v1/tenant-config`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Api-Key`

## Response `200`

The stored config (never the embed secret), or the defaults when none is stored.

- object
  - `ok` unknown, required
  - `config` TenantConfig, required
    - `brandName` string, nullable, required
    - `themeMode` 'light' | 'dark', required
    - `themeOverrides` ThemeOverrides, required: Merged onto the default theme for themeMode and validated through the WCAG AA contrast gate; a failing token is rejected with its ratio, never shipped.
      - `colors` object: Partial ThemeColors; text/textMuted must reach 4.5:1 on background and surface, primaryText 4.5:1 on primary.
        - `background` string
        - `surface` string
        - `text` string
        - `textMuted` string
        - `primary` string
        - `primaryText` string
        - `positive` string
        - `negative` string
        - `border` string
        - `chart` string[]: Chart series palette, in draw order; each must reach 3:1 on background.
      - `typography` object
        - `fontFamily` string
        - `fontFamilyMono` string
        - `baseSizePx` number
        - `scaleRatio` number
      - `spacingPx` number[]: Spacing scale in px, smallest first.
      - `radiusPx` number
    - `disclosureAdditions` string[], required: Firm paragraphs appended AFTER the engine's core disclosure — the core text is not replaceable.
    - `domainAllowlist` string[], required
    - `hideAttribution` boolean, required: Growth plan only — rejected at write time on other plans.
    - `assumptionProfile` ProfileRef, required: An assumption profile from GET /api/v1/assumption-profiles, or the built-in illustrative-6-3-3@1.0.0.
      - `id` string, required
      - `version` string, required: Exact version; a pinned run never silently gets a newer one.
    - `evidenceAffordances` boolean, required: Provenance chips and the checkable footer on tenant embeds; defaults on.

## Other responses

- `401`: No key presented (Authorization: Bearer wk_… or X-Api-Key).
- `402`: Unrecognized or revoked API key.
- `403`: The key predates organization support (contact support for a free rotation).
- `429`: Hourly per-org stateful quota, a per-route durable limit, or the 120 requests/minute per-IP burst backstop.
- `503`: Billing is not configured on this deployment; household resources are disabled rather than served without tenancy (production fail-closed).

---

[API](https://skmtc.dev/worthune/apis/worthune-api.md) · [All operations](https://skmtc.dev/worthune/apis/worthune-api/llms.txt) · [OpenAPI document](https://skmtc.dev/worthune/apis/worthune-api/revisions/9f2241072555?raw)