Update Credential changedapi/beta/vaults/credentials/update
Nearest release: v2.1.245, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+54added
Lines−65removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits21to this page, all time
# Update Credential ## Path parameters ## Headers ## Body parameters ## Returns ## Example ### Response (200) ## Update Credential ### Path Parameters ### Header Parameters ### Body Parameters ### Returns ### Example #### Response
The whole hunk
from line 1, old and new numbered
/
from line 1
1---
2title: Update Credential
3url: https://platform.claude.com/docs/en/api/beta/vaults/credentials/update
4---
1# Update Credential
52
6## Update Credential
3**POST** `/v1/vaults/{vault_id}/credentials/{credential_id}`
74
8**post** `/v1/vaults/{vault_id}/credentials/{credential_id}`
9
105Update Credential
116
12### Path Parameters
7## Path parameters
138
149- `vault_id: string`
1510
1611- `credential_id: string`
1712
18### Header Parameters
13## Headers
1914
2015- `"anthropic-beta": optional array of AnthropicBeta`
2116
from line 88
9388
9489 - `"mid-conversation-tool-changes-2026-07-01"`
9590
96### Body Parameters
91## Body parameters
9792
9893- `auth: optional BetaManagedAgentsMCPOAuthUpdateParams or BetaManagedAgentsStaticBearerUpdateParams or BetaManagedAgentsEnvironmentVariableUpdateParams`
9994
10095 Updated authentication details for a credential.
10196
102 - `BetaManagedAgentsMCPOAuthUpdateParams object { type, access_token, expires_at, refresh }`
97 - `BetaManagedAgentsMCPOAuthUpdateParams object`
10398
10499 Parameters for updating an MCP OAuth credential. The `mcp_server_url` is immutable.
105100
106101 - `type: "mcp_oauth"`
107102
108 - `"mcp_oauth"`
109
110103 - `access_token: optional string or null`
111104
112105 Updated OAuth access token.
113106
107 minLength: 1, maxLength: 8192
108
114109 - `expires_at: optional string or null`
115110
116111 A timestamp in RFC 3339 format
117112
113 format: date-time
114
118115 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshUpdateParams or null`
119116
120117 Parameters for updating OAuth refresh token configuration.
from line 120
123120
124121 Updated OAuth refresh token.
125122
123 minLength: 1, maxLength: 4096
124
126125 - `scope: optional string or null`
127126
128127 Updated OAuth scope for the refresh request.
129128
129 maxLength: 8192
130
130131 - `token_endpoint_auth: optional BetaManagedAgentsTokenEndpointAuthBasicUpdateParam or BetaManagedAgentsTokenEndpointAuthPostUpdateParam`
131132
132133 Updated HTTP Basic authentication parameters for the token endpoint.
133134
134 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object { type, client_secret }`
135 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object`
135136
136137 Updated HTTP Basic authentication parameters for the token endpoint.
137138
138139 - `type: "client_secret_basic"`
139140
140 - `"client_secret_basic"`
141
142141 - `client_secret: optional string or null`
143142
144143 Updated OAuth client secret.
145144
146 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object { type, client_secret }`
145 minLength: 1, maxLength: 512
147146
147 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object`
148
148149 Updated POST body authentication parameters for the token endpoint.
149150
150151 - `type: "client_secret_post"`
151152
152 - `"client_secret_post"`
153
154153 - `client_secret: optional string or null`
155154
156155 Updated OAuth client secret.
157156
158 - `BetaManagedAgentsStaticBearerUpdateParams object { type, token }`
157 minLength: 1, maxLength: 512
159158
159 - `BetaManagedAgentsStaticBearerUpdateParams object`
160
160161 Parameters for updating a static bearer token credential. The `mcp_server_url` is immutable.
161162
162163 - `type: "static_bearer"`
163164
164 - `"static_bearer"`
165
166165 - `token: optional string or null`
167166
168167 Updated static bearer token value.
169168
170 - `BetaManagedAgentsEnvironmentVariableUpdateParams object { type, injection_location, networking, secret_value }`
169 minLength: 1, maxLength: 8192
171170
171 - `BetaManagedAgentsEnvironmentVariableUpdateParams object`
172
172173 Parameters for updating an environment variable credential. `secret_name` is immutable.
173174
174175 - `type: "environment_variable"`
175176
176 - `"environment_variable"`
177
178177 - `injection_location: optional BetaManagedAgentsInjectionLocationUpdateParams`
179178
180179 Updated injection location.
from line 190
191190
192191 Updated networking scope. Full replacement.
193192
194 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
193 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
195194
196195 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
197196
198197 - `type: "unrestricted"`
199198
200 - `"unrestricted"`
199 - `BetaManagedAgentsLimitedCredentialNetworkingParams object`
201200
202 - `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
203
204201 Substitute the secret only on requests to the listed hosts.
205202
206203 - `allowed_hosts: array of string`
from line 206
209206
210207 - `type: "limited"`
211208
212 - `"limited"`
213
214209 - `secret_value: optional string or null`
215210
216211 Updated secret value.
217212
213 minLength: 1, maxLength: 4096
214
218215- `display_name: optional string or null`
219216
220217 Updated human-readable name for the credential. 1-255 characters.
221218
219 minLength: 1, maxLength: 255
220
222221- `metadata: optional map[string] or null`
223222
224223 Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omitted keys are preserved.
225224
226### Returns
225## Returns
227226
228- `BetaManagedAgentsCredential object { id, archived_at, auth, 6 more }`
227- `BetaManagedAgentsCredential object`
229228
230229 A credential stored in a vault. Sensitive fields are never returned in responses.
231230
from line 236
237236
238237 A timestamp in RFC 3339 format
239238
239 format: date-time
240
240241 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
241242
242243 Authentication details for a credential.
243244
244 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
245 - `BetaManagedAgentsMCPOAuthAuthResponse object`
245246
246247 OAuth credential details for an MCP server.
247248
from line 252
251252
252253 - `type: "mcp_oauth"`
253254
254 - `"mcp_oauth"`
255
256255 - `expires_at: optional string or null`
257256
258257 A timestamp in RFC 3339 format
259258
259 format: date-time
260
260261 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
261262
262263 OAuth refresh token configuration returned in credential responses.
from line 274
273274
274275 Token endpoint requires no client authentication.
275276
276 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
277 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
277278
278279 Token endpoint requires no client authentication.
279280
280281 - `type: "none"`
281282
282 - `"none"`
283 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
283284
284 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
285
286285 Token endpoint uses HTTP Basic authentication with client credentials.
287286
288287 - `type: "client_secret_basic"`
289288
290 - `"client_secret_basic"`
289 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
291290
292 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
293
294291 Token endpoint uses POST body authentication with client credentials.
295292
296293 - `type: "client_secret_post"`
297294
298 - `"client_secret_post"`
299
300295 - `resource: optional string or null`
301296
302297 OAuth resource indicator.
from line 300
305300
306301 OAuth scope for the refresh request.
307302
308 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
303 - `BetaManagedAgentsStaticBearerAuthResponse object`
309304
310305 Static bearer token credential details for an MCP server.
311306
from line 310
315310
316311 - `type: "static_bearer"`
317312
318 - `"static_bearer"`
313 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
319314
320 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
321
322315 Environment variable credential details. The secret value is never returned.
323316
324317 - `injection_location: BetaManagedAgentsInjectionLocationResponse`
from line 330
337330
338331 Outbound hosts the secret value is substituted on.
339332
340 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
333 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
341334
342335 The secret is substituted on any host the session's Environment network policy permits egress to.
343336
344337 - `type: "unrestricted"`
345338
346 - `"unrestricted"`
339 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
347340
348 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
349
350341 The secret is substituted only on requests to the listed hosts.
351342
352343 - `allowed_hosts: array of string`
from line 346
355346
356347 - `type: "limited"`
357348
358 - `"limited"`
359
360349 - `secret_name: string`
361350
362351 Name of the environment variable.
from line 352
363352
364353 - `type: "environment_variable"`
365354
366 - `"environment_variable"`
367
368355 - `created_at: string`
369356
370357 A timestamp in RFC 3339 format
371358
359 format: date-time
360
372361 - `metadata: map[string]`
373362
374363 Arbitrary key-value metadata attached to the credential.
from line 364
375364
376365 - `type: "vault_credential"`
377366
378 - `"vault_credential"`
379
380367 - `updated_at: string`
381368
382369 A timestamp in RFC 3339 format
383370
371 format: date-time
372
384373 - `vault_id: string`
385374
386375 Identifier of the vault this credential belongs to.
from line 378
389378
390379 Human-readable name for the credential.
391380
392### Example
381## Example
393382
394```http
383```bash
395384curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID \
396385 -H 'Content-Type: application/json' \
397386 -H 'anthropic-version: 2023-06-01' \
from line 394
405394 }'
406395```
407396
408#### Response
397### Response (200)
409398
410399```json
411400{
No line in this hunk matches that.