Multi-Tenant Graph RAG

Model tenant boundaries, graph overlays, and bucket-routed writes for B2B Graph RAG.

Use Tenant IDs as Graph Boundaries

tenantId is the hard namespace and graph boundary. Use separate tenant IDs when two customers must have separate graphs. Cloud organization/API-key auth resolves the account and schema, but the application tenant remains customer-supplied.

tenant-clients.ts

import { GroupId, TenantId, typegraphInit } from '@typegraph-ai/sdk'

const acme = await typegraphInit({
  apiKey: process.env.TYPEGRAPH_API_KEY!,
  tenantId: TenantId('tenant_acme'),
  graphs: {
    public: { access: 'public' },
    internal: { extends: ['public'], access: { read: { groups: [GroupId('sales')] }, write: { groups: [GroupId('sales')] } } },
  },
  buckets: {
    public: { graph: 'public' },
    salesforce: { graph: 'internal', graphExtraction: true },
    gong: { graph: 'internal', graphExtraction: true },
  },
})

const globex = await typegraphInit({
  apiKey: process.env.TYPEGRAPH_API_KEY!,
  tenantId: TenantId('tenant_globex'),
})

Write Documents Through Buckets

Buckets choose the write graph. Use public for externally visible knowledge and an internal bucket/graph for customer activity, transcripts, and support notes.

document-access.ts

import { GroupId, UserId, entityRef } from '@typegraph-ai/sdk'

await acme.document.ingest(
  [{
    id: 'salesforce:acct_123:brief',
    name: 'Acme account brief',
    description: 'Sales account brief for Acme Corp.',
    content: 'Acme is evaluating enterprise SSO and needs SOC2 evidence.',
    metadata: { provider: 'salesforce', accountId: 'acct_123' },
  }],
  {
    bucketId: 'salesforce',
    context: {
      userId: UserId('dana'),
      groupId: GroupId('sales'),
    },
  },
)

Ingest Events With Participants

Events are business occurrences. Participants are provenance and graph context, not access grants. They let broad B2B questions traverse customers, issues, contacts, and product areas inside the selected graph.

event-participants.ts

await acme.event.ingest(
  {
    id: 'gong:meeting:acct_123:2026-05-08',
    name: 'Acme SSO discovery call',
    description: 'Discovery call where Acme reported SSO blockers.',
    occurredAt: new Date('2026-05-08T17:00:00Z'),
    participants: [
      entityRef('organization', 'org_acme'),
      entityRef('contact', 'alex'),
      entityRef('user', 'dana'),
    ],
    documents: [{
      id: 'gong:transcript:acct_123:2026-05-08',
      name: 'Acme SSO discovery transcript',
      content: transcriptText,
      metadata: { provider: 'gong' },
    }],
  },
  {
    bucketId: 'gong',
    context: {
      groupId: GroupId('sales'),
    },
  },
)

Search Within Tenant and Graph

The Acme and Globex clients cannot cross tenant graphs. Within Acme, graph: "internal" reads internal records plus public ancestors. explain shows active resources, weights, graph closure, and skipped resources while debugging.

tenant-search.ts

const salesView = await acme.search('Which customers have SSO blockers?', {
  graph: 'internal',
  resources: ['events', 'documents', 'entities', 'facts'],
  weights: { semantic: 0.8, bm25: 0.5, graph: 1, recency: 0.6 },
  context: {
    userId: UserId('dana'),
    groupId: GroupId('sales'),
  },
  explain: true,
})

const globexView = await globex.search('Which customers have SSO blockers?', {
  resources: ['events', 'documents', 'entities', 'facts'],
  weights: { semantic: 0.8, bm25: 0.5, graph: 1, recency: 0.6 },
})

Back to All Guides

import { GroupId, TenantId, typegraphInit } from '@typegraph-ai/sdk' const acme = await typegraphInit({ apiKey: process.env.TYPEGRAPH_API_KEY!, tenantId: TenantId('tenant_acme'), graphs: { public: { access: 'public' }, internal: { extends: ['public'], access: { read: { groups: [GroupId('sales')] }, write: { groups: [GroupId('sales')] } } }, }, buckets: { public: { graph: 'public' }, salesforce: { graph: 'internal', graphExtraction: true }, gong: { graph: 'internal', graphExtraction: true }, }, }) const globex = await typegraphInit({ apiKey: process.env.TYPEGRAPH_API_KEY!, tenantId: TenantId('tenant_globex'), })

import { GroupId, UserId, entityRef } from '@typegraph-ai/sdk' await acme.document.ingest( [{ id: 'salesforce:acct_123:brief', name: 'Acme account brief', description: 'Sales account brief for Acme Corp.', content: 'Acme is evaluating enterprise SSO and needs SOC2 evidence.', metadata: { provider: 'salesforce', accountId: 'acct_123' }, }], { bucketId: 'salesforce', context: { userId: UserId('dana'), groupId: GroupId('sales'), }, }, )

await acme.event.ingest( { id: 'gong:meeting:acct_123:2026-05-08', name: 'Acme SSO discovery call', description: 'Discovery call where Acme reported SSO blockers.', occurredAt: new Date('2026-05-08T17:00:00Z'), participants: [ entityRef('organization', 'org_acme'), entityRef('contact', 'alex'), entityRef('user', 'dana'), ], documents: [{ id: 'gong:transcript:acct_123:2026-05-08', name: 'Acme SSO discovery transcript', content: transcriptText, metadata: { provider: 'gong' }, }], }, { bucketId: 'gong', context: { groupId: GroupId('sales'), }, }, )

const salesView = await acme.search('Which customers have SSO blockers?', { graph: 'internal', resources: ['events', 'documents', 'entities', 'facts'], weights: { semantic: 0.8, bm25: 0.5, graph: 1, recency: 0.6 }, context: { userId: UserId('dana'), groupId: GroupId('sales'), }, explain: true, }) const globexView = await globex.search('Which customers have SSO blockers?', { resources: ['events', 'documents', 'entities', 'facts'], weights: { semantic: 0.8, bm25: 0.5, graph: 1, recency: 0.6 }, })