Update Credential

Request parameters

• vault_idstring必填

  path: Vault ID (path or query parameter).

• credential_idstring必填

  path: Path parameter: the credential ID.

• vault_idstring必填

  query: Vault ID (path or query parameter).

• authobject可选

  Updated authentication details for a credential.

  ▸ 展开子字段（8）

  • typestring必填
    取值 environment_variable
  • access_tokenstring可选

    Updated OAuth access token.

  • expires_atstring可选

    A timestamp in RFC 3339 format

  • refreshobject可选

    Parameters for updating OAuth refresh token configuration.

  • tokenstring可选

    Updated static bearer token value.

  • injection_locationobject可选

    Updated injection location.

  • networkingobject可选

    Updated networking scope. Full replacement.

  • secret_valuestring可选

    Updated secret value.

• display_namestring可选

  Updated human-readable name for the credential. 1-255 characters.

• metadataobject可选

  Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omitted keys are preserved.

Returns

200

Supports environment_variable and static_bearer. environment_variable networking supports limited only; unrestricted returns 400. secret_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection_location defaults match the official API. A static_bearer token is usable only on the host of its mcp_server_url. Creating or updating mcp_oauth returns 501 (not_implemented_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.

Errors follow the Claude Managed Agents format — see error codes