All Cortex components take the tenant ID from a header X-Scope-OrgID on each request. A tenant (also called “user” or “org”) is the owner of a set of series written to and queried from Cortex. All Cortex components trust this value completely: if you need to protect your Cortex installation from accidental or malicious calls, then you must add an additional layer of protection. Typically, this means you run Cortex behind a reverse proxy, and you must ensure that all callers, both mach...
