No, a single PDP instance is scoped to a *single environment*.
(1)
There are three types of API keys in
Permit.io:
• *Environment API Keys* – can access a single environment. Only this type of API key can be used by the PDP container.
• *Project API Keys* – can access a single project and all environments within it.
• *Organization API Keys* – can act on your entire Permit workspace.
The PDP container specifically requires an *Environment API Key*, which means each PDP is configured for one specific environment.
If you need to serve authorization checks for multiple environments or projects, you would need to run *separate PDP instances*, each configured with its own Environment API Key.
For multi-tenant scenarios within a single environment, tenants are handled as first-class citizens within that environment—users and resources are scoped to tenants, but the policy schema remains shared across tenants within the same environment.
(2)