# Tanat — AI Infrastructure for Business Operations
> Provision, configure, govern, and deploy AI agents across your website, messaging channels, and business systems.

## Core Concepts
- Tenant (Workspace): Isolated business organisation owning multiple agents, knowledge sources, and channels.
- Agent: Configured AI role (Support, Sales, HR, Booking, Operations, Finance, IT, Knowledge, Custom).
- Installation: Binds an agent to runtime configuration and channels.
- Publishable Key (`pk_live_...` / `pk_test_...`): Browser-safe, origin-locked key for website widgets.
- Secret API Key (`tnt_...`): Server-side key for full REST API & SDK operations.

## Website Widget (1-Line Embed)
```html
<script src="https://tanat-web.pages.dev/embed/tanat-widget.js" data-key="pk_live_..." data-agent="inst_..." defer></script>
```

## Public Widget API (`/api/public/v1` — header `X-Tanat-Key: pk_...`)
- `GET /api/public/v1/config` — Bootstrap agent name, greeting, and capabilities.
- `POST /api/public/v1/sessions` — Create a visitor or HMAC-verified user session (`{ user_id?, user_signature? }`).
- `POST /api/public/v1/sessions/:id/messages` — Send a message (`{ content }`) and receive assistant response + sources.

## Authenticated REST API (`/api/v1` — header `Authorization: Bearer tnt_...`)
- `GET /api/v1/tenants` — Current workspace details.
- `GET|POST /api/v1/agents` & `PATCH|DELETE /api/v1/agents/:id` — Manage agents.
- `GET|POST /api/v1/platform/knowledge` — Add website, FAQ, policy, or document knowledge.
- `GET|POST /api/v1/platform/memories` — Read or store persistent customer/business memories.
- `POST /api/v1/sessions` & `POST /api/v1/sessions/:id/messages` — Server-to-server agent conversations.
- `GET /api/v1/actions` & `POST /api/v1/actions/:id/approve|reject|execute` — Human-in-the-loop governance.
- `POST /api/v1/payments/intents` — Create NEAR Intents payment quotes & hosted checkout links.