Agent skill

Multitenant

by TheBeardedBearSAS in TheBeardedBearSAS/claude-craft

Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption.

Install Multitenant

skills CLI

$ npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install TheBeardedBearSAS/claude-craft multitenant --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/multitenant .claude/skills/multitenant && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "multitenant" agent skill from https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant into .claude/skills/multitenant/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "multitenant", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install TheBeardedBearSAS/claude-craft multitenant --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.claude/skills/multitenant .agents/skills/multitenant && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "multitenant" agent skill from https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant into .agents/skills/multitenant/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "multitenant", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install TheBeardedBearSAS/claude-craft multitenant --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.claude/skills/multitenant .cursor/skills/multitenant && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "multitenant" agent skill from https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant into .cursor/skills/multitenant/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "multitenant", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/TheBeardedBearSAS/claude-craft.git --path .claude/skills/multitenant

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install TheBeardedBearSAS/claude-craft multitenant --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.claude/skills/multitenant .gemini/skills/multitenant && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "multitenant" agent skill from https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant into .gemini/skills/multitenant/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "multitenant", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install TheBeardedBearSAS/claude-craft multitenant

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft.git skills-src && mkdir -p .github/skills && cp -r skills-src/.claude/skills/multitenant .github/skills/multitenant && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "multitenant" agent skill from https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant into .github/skills/multitenant/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "multitenant", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install TheBeardedBearSAS/claude-craft multitenant --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.claude/skills/multitenant .opencode/skills/multitenant && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "multitenant" agent skill from https://github.com/TheBeardedBearSAS/claude-craft/tree/main/.claude/skills/multitenant into .opencode/skills/multitenant/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "multitenant", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: multitenant
GitHub stars: 107
Token cost: ~758 tokens
SKILL.md length: 293 words
Files: 2
Skills in repo: 12
Repo updated: Sep 14, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption.

Works in 5 steps: tenant_id propagé à chaque requête… → PostgreSQL Row-Level Security (RLS)… → Tests d'isolation obligatoires. Tenant A… → …
Working with multitenant applications
SKILL.md covers Trois tiers d'isolation, Cinq invariants non-négociables, Pattern minimal — Shared… and Anti-patterns critiques, plus 2 more sections
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Multitenant is an agent skill from TheBeardedBearSAS/claude-craft. Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption. Use when working with multitenant applications, tenant isolation, data segregation.

Its SKILL.md is about 760 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `REFERENCE.md`).

It sits in Backend & APIs, covering Multi-tenancy and Authorization and RBAC. The repository describes itself as: Supercharge Claude Code with Expert Knowledge A comprehensive framework for AI-assisted development. Install standardized rules, agents, and commands for your projects across… The licence is MIT.

When your agent uses it

Working with multitenant applications
Tenant isolation
Data segregation

Example prompts

“/multitenant”

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

tenant_id propagé à chaque requête (AsyncLocalStorage / SecurityContext / middleware).
PostgreSQL Row-Level Security (RLS) activé sur TOUTES les tables. Filet de sécurité contre un oubli applicatif.
Tests d'isolation obligatoires. Tenant A ne doit jamais lire/écrire les données de B — y compris via tri, requête nuée, agrégat.
Audit trail isolé par tenant. Pas de log multi-tenant cross-référencé sans permission explicite.
Field-level encryption sur PII / secrets sensibles (Halite PHP, Eloquent Casts, libsodium).

What it can do on your machine

Read from SKILL.md and the folder at commit 99c1ee3. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are sql and php).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Multitenant loads about 758 tokens when it runs. Until then it costs about 52 tokens; SKILL.md has 293 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~52
When it runs · the whole SKILL.md, loaded when a task matches: ~758

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from TheBeardedBearSAS/claude-craft at commit 99c1ee3, republished under its MIT licence (© TheBeardedBearSAS). 293 words, ~758 tokens.

Download SKILL.mdSave it as .claude/skills/multitenant/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.

name: multitenant
description: Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption. Use when working with multitenant applications, tenant isolation, data segregation.
context: fork files: ["**/TenantFilter.php", "**/TenantScope.php", "**/middleware/Tenant*"]

Multitenant — Quick Reference

Servir plusieurs clients (tenants) sur la même base de code avec isolation stricte et un coût d'infra contrôlé.

Trois tiers d'isolation

Tier	Isolation	Coût	Cas d'usage
Tier 1 — Shared schema	colonne `tenant_id` partout, filtres SQL automatiques	Faible	Startups, free / petits clients
Tier 2 — Dedicated schema	un schéma PostgreSQL par tenant	Moyen	SMB, clients exigeants
Tier 3 — Dedicated DB	une base entière par tenant	Élevé	Enterprise, compliance stricte (HDS, FedRAMP)

Règle de migration : commencer Tier 1, migrer un client en Tier 2/3 quand il représente > 20 % du revenu OU exige un SLA spécifique.

Cinq invariants non-négociables

tenant_id propagé à chaque requête (AsyncLocalStorage / SecurityContext / middleware).
PostgreSQL Row-Level Security (RLS) activé sur TOUTES les tables. Filet de sécurité contre un oubli applicatif.
Tests d'isolation obligatoires. Tenant A ne doit jamais lire/écrire les données de B — y compris via tri, requête nuée, agrégat.
Audit trail isolé par tenant. Pas de log multi-tenant cross-référencé sans permission explicite.
Field-level encryption sur PII / secrets sensibles (Halite PHP, Eloquent Casts, libsodium).

Pattern minimal — Shared schema + RLS

sql

ALTER TABLE invoices ADD COLUMN tenant_id UUID NOT NULL;
ALTER TABLE invoices ENABLE ROW LEVEL SECURITY;
CREATE POLICY tenant_isolation ON invoices
  USING (tenant_id = current_setting('app.tenant_id')::uuid);

php

// Symfony — middleware qui set la variable session pour RLS
$conn->executeStatement(
    'SET LOCAL app.tenant_id = :tid',
    ['tid' => $tenantId]
);

Anti-patterns critiques

❌ Oublier le filtre tenant_id dans une requête raw → fuite cross-tenant.
❌ Cache Redis sans préfixe tenant → données de A retournées à B.
❌ Job worker async qui perd le tenant_id → impossible de retrouver le contexte.
❌ Signed URLs / tokens sans tenant_id dans le payload → utilisable cross-tenant.
❌ Field encryption avec une clé unique partagée → compromission = exposition totale (préférer keys per tenant).

RBAC / ABAC

RBAC : rôles globaux (admin, member, viewer) suffisent pour 80 % des cas.
ABAC : passer à des policies (Casbin, Cerbos, OPA) quand les règles dépendent d'attributs (région, montant, statut).

Pour aller plus loin

Patterns détaillés par tier, migration tier 1 → tier 2 sans downtime, tests d'isolation (Pest + tenant fixtures), RBAC/ABAC, exemples Laravel + Symfony, checklists par phase : voir @.claude/skills/multitenant/REFERENCE.md.

Files

SKILL.md and 1 other file in .claude/skills/multitenant of TheBeardedBearSAS/claude-craft.

SKILL.md
REFERENCE.md

Open the folder on GitHubat commit 99c1ee3

Compare with similar skills

Multitenant next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Multitenant compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Multitenant this skillTheBeardedBearSAS/claude-craft	107	—	~758	Automated safety check: Pass	MIT	24 days ago
Abp Authorizationabpframework/abp	14k	—	~1.3k	Automated safety check: Pass	LGPL-3.0	today
Django Access Reviewgetsentry/skills	1k	3 repos	~2.6k	Automated safety check: Notes	Apache-2.0	6 days ago
Arandu Shared Modules Guidearandu-io/arandu	281	—	~1.8k	Automated safety check: Pass	MIT	4 days ago
Supercheck Security Authsupercheck-io/supercheck	215	—	~1.2k	Automated safety check: Pass	AGPL-3.0	yesterday
Backend AI Guidelablup/backend.ai-webui	133	1 repos	~1.8k	Automated safety check: Pass	LGPL-3.0	today

Similar skills

Abp Authorization
abpframework/abp
ABP permission system - PermissionDefinitionProvider, [Authorize] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side.
14k GitHub stars~1.3k tokensUpdated today
Backend & APIsAuto-check passed
Django Access Review
getsentry/skills
Official
Django access control and IDOR security review. An agent skill from getsentry/skills.
1k GitHub starsUsed in 3 repos~2.6k tokens
Backend & APIsAuto-check: notes
Arandu Shared Modules Guide
arandu-io/arandu
Decides whether a feature belongs in the application or in one of five shared Arandu modules before adding permissions, wallets, tags, Markdown rendering or API docs.
281 GitHub stars~1.8k tokensUpdated 4 days ago
Backend & APIsAuto-check passed
Supercheck Security Auth
supercheck-io/supercheck
Work on Supercheck authentication, RBAC, tenant isolation, sessions, API and trigger keys, invitations, project membership, project variables, OAuth, super-admin behavior, SSRF, or…
215 GitHub stars~1.2k tokensUpdated yesterday
Backend & APIsAuto-check passed
Backend AI Guide
lablup/backend.ai-webui
Expert guide for Backend.AI distributed computing platform. An agent skill from lablup/backend.ai-webui.
133 GitHub starsUsed in 1 repo~1.8k tokens
Backend & APIsAuto-check passed
Arandu Policy and Grants
arandu-io/arandu
Explains authorization in an Arandu Go application: write a Policy, get a security.Grant through security.Authorize, re-authorize each row, and keep tenant isolation.
281 GitHub stars~1.4k tokensUpdated 4 days ago
Backend & APIsAuto-check passed

Questions about Multitenant

What does Multitenant do?

Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption. Multitenant is an agent skill from TheBeardedBearSAS/claude-craft. Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption.

When should I use Multitenant?

Multitenant fits situations like: working with multitenant applications; tenant isolation; data segregation.

How do I install Multitenant in Claude Code?

Run `npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a claude-code`. Or copy the skill folder (.claude/skills/multitenant in TheBeardedBearSAS/claude-craft) into .claude/skills/multitenant in your project. Claude Code loads it when a task matches its description.

How do I install Multitenant in Codex?

Run `npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a codex`. Or copy the skill folder (.claude/skills/multitenant in TheBeardedBearSAS/claude-craft) into .agents/skills/multitenant in your project. Codex loads it when a task matches its description.

Can I use Multitenant in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add TheBeardedBearSAS/claude-craft --skill multitenant -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/multitenant, .gemini/skills/multitenant, .github/skills/multitenant and .opencode/skills/multitenant in your project.

What does Multitenant need to run?

SKILL.md names no scripts, command-line tools or credentials: Multitenant is instructions for the agent only.

Does Multitenant access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Multitenant safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Multitenant use?

Multitenant is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Multitenant use?

About 758 tokens (SKILL.md is roughly 3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Multitenant?

Skills that share tags, products or a category with Multitenant: Abp Authorization (abpframework/abp, 14k stars), Django Access Review (getsentry/skills, 1k stars), Arandu Shared Modules Guide (arandu-io/arandu, 281 stars) and Supercheck Security Auth (supercheck-io/supercheck, 215 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Multitenant?

TheBeardedBearSAS (a GitHub organization) maintains it in TheBeardedBearSAS/claude-craft, which has 107 GitHub stars. The repository holds 12 skills in this directory. The repository was last updated on September 14, 2026.

Source: TheBeardedBearSAS/claude-craft on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Multitenant

Install Multitenant

Facts

At a glance

What it does

When your agent uses it

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Multitenant — Quick Reference

Trois tiers d'isolation

Cinq invariants non-négociables

Pattern minimal — Shared schema + RLS

Anti-patterns critiques

RBAC / ABAC

Pour aller plus loin

Files

Compare with similar skills

Similar skills

Abp Authorization

Django Access Review

Arandu Shared Modules Guide

Supercheck Security Auth

Backend AI Guide

Arandu Policy and Grants

More from TheBeardedBearSAS/claude-craft

Architect

Async

Atomic Tasks

Cqrs

Design Md Convention

Docker Hadolint

Questions about Multitenant

Install Multitenant

Facts

At a glance

What it does

When your agent uses it

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Multitenant — Quick Reference

Trois tiers d'isolation

Cinq invariants non-négociables

Pattern minimal — Shared schema + RLS

Anti-patterns critiques

RBAC / ABAC

Pour aller plus loin

Files

Compare with similar skills

Similar skills

More from TheBeardedBearSAS/claude-craft

Related

Questions about Multitenant