Authentication & JWT Specification
MetaPilot authentication relies on JSON Web Tokens (JWT) implemented via .
rest_framework_simplejwtToken Lifecycle
Rendering diagram...
Role-Based Access Control (RBAC) Hierarchy
| Role | Scope | Permitted Actions |
|---|---|---|
| Global Platform | Full access to all endpoints, agencies, tenants, audit logs, setup endpoints. |
| Agency Level | Can manage clients/tenants created under their agency. |
| Tenant Level | Can manage tenant settings, team members, WhatsApp configurations, and campaigns. |
| Operator Level | Read/write access within tenant inbox, messaging, and templates. |