Auth Cloud And Governance

Agent exposes a self-hosted Qdrant on a public port without setting service.api_key, assuming it is private.

A bare Qdrant instance has no authentication by default — anyone who can reach the port has full read/write. Always set service.api_key (and TLS) before exposing it, and pass the key via the api-key header. Never rely on network obscurity alone.

A user-facing search service only needs to query. Agent gives it the read_only_api_key rather than the full-access key.

Use service.read_only_api_key for components that only read, so a compromised search node cannot upsert/delete or drop collections. Reserve the full-access api_key for ingest/admin paths. Apply least privilege per component.

A large multitenant collection has slow per-tenant queries. Agent marks the tenant_id payload index with is_tenant=true.

Set is_tenant=true on the tenant key's payload index so Qdrant colocates each tenant's points on disk and optimizes tenant-filtered queries. This is a performance optimization layered on the mandatory tenant filter — it does not replace the filter for isolation.