Update Credential

Prerequisites

Endpoint and authentication configured. For details, see Overview and authentication.

Endpoint

POST /vaults/{vault_id}/credentials/{credential_id}

Path parameters

Field	Required	Type	Description
`vault_id`	Yes	string	Vault ID, format `vlt_xxx`
`credential_id`	Yes	string	Credential ID, format `cred_xxx`

Request body

Field	Required	Type	Description
`auth`	No	object	Authentication information, always of the environment_variable type. The `type` and `secret_name` fields are immutable on update, and an empty `secret_value` means no change. See auth type on the Create Credential page for the full structure
`display_name`	No	string	Human-readable name of the Credential, max 255 characters
`metadata`	No	object	Custom key-value pairs for business metadata

Request example

curl -X POST "$AGENTSTUDIO_URL/vaults/vlt_xxx/credentials/cred_xxx" \
  -H "Authorization: Bearer $DASHSCOPE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "display_name": "Production API key",
    "auth": {
      "type": "environment_variable",
      "secret_name": "API_KEY",
      "secret_value": "sk-new-value",
      "networking": {
        "allowed_hosts": [
          "api.example.com"
        ]
      },
      "injection_location": {
        "header": true
      }
    }
  }'

Response example

{
  "id": "cred_xxx",
  "type": "credential",
  "vault_id": "vlt_xxx",
  "display_name": "Production API key",
  "auth": {
    "type": "environment_variable",
    "secret_name": "API_KEY",
    "networking": {
      "allowed_hosts": [
        "api.example.com"
      ]
    },
    "injection_location": {
      "header": true
    }
  },
  "metadata": {},
  "archived_at": null,
  "created_at": "2026-07-10T08:00:00Z",
  "updated_at": "2026-07-15T03:00:00Z",
  "request_id": "req_xxx"
}

Response fields

Field	Type	Description
`id`	string	Credential ID, format `cred_xxx`
`type`	string	Always `credential`
`vault_id`	string	Vault ID that the Credential belongs to
`display_name`	string	Human-readable name of the Credential
`auth`	object	Authentication information with sensitive values masked
`metadata`	object	Custom key-value pairs
`archived_at`	string \| null	Archive timestamp; `null` if not archived
`created_at`	string	Creation time, ISO 8601
`updated_at`	string	Last update time, ISO 8601
`request_id`	string	Unique request identifier

Error codes

HTTP status	Error code	Description
400	`InvalidParameter`	Required parameter missing or invalid
401	`InvalidApiKey`	Invalid API key provided

​Prerequisites

​Endpoint

​Path parameters

​Request body

​Request example

​Response example

​Response fields

​Error codes

Prerequisites

Endpoint

Path parameters

Request body

Request example

Response example

Response fields

Error codes