Skip to main content
POST
Update a credential

Authorizations

Authorization
string
header
required

An API key minted in Command Center (Settings -> API Keys), sent as Authorization: Bearer 2501_ak_.... A Command Center session cookie is also accepted.

Path Parameters

id
string
required

Body

application/json
name
string
Required string length: 1 - 70
description
string
value
string
Minimum string length: 1
vault_path
string

Response

The updated credential

A credential never carries value: the secret is accepted on create and update, and never returned on any read.

id
string
required
Example:

"cred_1f3c8a90-..."

name
string
required
Example:

"web-01 root key"

org_id
string | null
required

null means tenant-wide - readable by every org

Example:

"org_460b541c-..."

tenant_id
string
required
Example:

"ten_115bea44-..."

type
enum<string>
required
Available options:
SECRET,
VAULT_PATH,
SSH_PRIVATE_KEY
vault_path
string | null
required
Example:

"secret/prod/web-01"

description
string | null
required
created_at
string<date-time>
required
Example:

"2026-08-26T10:00:26.380Z"

updated_at
string<date-time>
required
Example:

"2026-08-26T10:00:26.380Z"