read.admin.by_host

Resolve an admin hostname to the tenant whose admin it serves, or null when no tenant claims it. The directory key is normalized like a store host: scheme, path, query and fragment are dropped, the host is lowercased and IDN-punycoded, and the scheme’s default port is removed (so “https://admin.marca.com” and “https://admin.marca.com:443” are the same address, while “http://localhost:3031” and “http://localhost:3032” are two). Matching tries the exact host WITH its port first, then falls back to the bare host — so an admin published on a port is only reachable on that port, while a proxy forwarding “admin.marca.com:443” still finds the tenant registered as “admin.marca.com”. An admin hostname is unique across ALL tenants. Public and actorless: it returns only the tenant id, which grants nothing without a credential bound to that tenant.

• Surface: GET /v1/read/admin.by_host · CLI forge read admin.by_host · MCP tool read.admin.by_host
• Auth: public (no actor; store resolves the tenant)

Params (JSON Schema)

{
  "properties": {
    "host": {
      "description": "The request Host header of the admin, e.g. \"admin.marca.com\" or \"localhost:3031\". Case-insensitive; the port is significant (see the matching rule).",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "host"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this capability does not declare an output schema.

Errors

validation_failed (400) · not_found (404)