# provision

URL: /business/nouns/tenant/provision · Id: `verb:Tenant.provision` · Call: `await $.Tenant.provision({ … })` (SDK) or the `do` tool at `https://api.sb/mcp`. Inputs says what to pass, Outputs what returns, When it waits who approves.

> Provision creates a Customer’s Tenant in a Startup’s App, holding that Customer’s records apart from every other.

Provision creates a [Customer](/business/nouns/customer)’s [Tenant](/business/nouns/tenant) in a [Startup](/business/nouns/startup)’s [App](/business/nouns/app), holding that Customer’s records apart from every other.

## Inputs
| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `customer` | [Customer](/business/nouns/customer) | Yes | The Customer the Tenant serves. |

## Outputs
| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `tenant` | [Tenant](/business/nouns/tenant) | Yes | The new Tenant. |

## Effects
- Emits [`Tenant.provisioned`](/business/events/Tenant.provisioned).
- Performed by the [Integration Engineer](/agents/engineering/integration-engineer).
- Grants the Entitlements of the Customer’s accepted Offers inside the Tenant.

## Refuses when
| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The operation is part of an Offer the caller has not accepted or paid for. | [`payment-required`](/code/api/errors/payment-required) | Accept the Offer named in the response, then retry the call. | [Offer.accept](/business/nouns/offer/accept) |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | [Tenant.provision](/business/nouns/tenant/provision) |
| The record is not in a state that allows this Verb, so the call is refused. | [`refused`](/code/api/errors/refused) | Read the record, run the Verb that moves it to an allowed state, then retry. | [Tenant.provision](/business/nouns/tenant/provision) |

## When it waits
| Gate | Default |
| --- | --- |
| Decision class | Low: two-way, nothing at stake |
| [Delay window](/systems/trust-and-governance/controls/one-way-windows) | None: it runs once review passes. |
| Limit | The call [Limit](/business/nouns/limit) of the [Permission](/business/nouns/permission) it runs under. |
| Over the Limit | It waits `pending` for an [Approval](/business/nouns/approval) from the [Founder](/agents/founding/founder). Approved, it runs; refused, it ends `refused` with [`limit-exceeded`](/code/api/errors/limit-exceeded); unanswered by its deadline, it ends `canceled`. |

## Example

**Ask**

```text
Provision the latest tenant with a customer.
```

**API**

```bash
curl -X POST https://api.sb/routewise.dev/tenants/provision \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"customer":"customer_1"}'
```

```json
{
  "api": "https://api.sb/routewise.dev",
  "tenant": {
    "$id": "https://api.sb/routewise.dev/tenants/tenant_1",
    "$type": "Tenant",
    "placement": "path",
    "apiVersion": "v2"
  },
  "action": {
    "$id": "https://api.sb/routewise.dev/actions/action_1",
    "operation": "Tenant.provision",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/routewise.dev/actions/action_1"
  }
}
```

**SDK**

```ts
import { $ } from 'startup-builder'

const tenant = await $.Tenant.provision({ customer: 'customer_1' })
```

**CLI**

```bash
npx startup-builder do Tenant.provision --json '{"customer":"customer_1"}'
```

**MCP**

```json
{
  "name": "do",
  "arguments": {
    "code": "return await $.Tenant.provision({ customer: 'customer_1' })"
  }
}
```

Next: [`Tenant.invite`](/business/nouns/tenant/invite) (in `guide:let-customers-sign-in`).

Guides that call it: [Let customers sign in](/products/app/let-customers-sign-in), [Store my customers' data](/products/app/store-my-customers-data).