> ## Documentation Index > Fetch the complete documentation index at: https://tbd-6fc993ce-hypeship-document-gov-proxy-routing.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Update a provider configuration > Update the supplied fields; omitted fields remain unchanged. Names must remain unique within the organization. Requires an organization-scoped credential or dashboard authentication; project-scoped credentials receive 403. ## OpenAPI ````yaml https://api.onkernel.com/spec.json patch /vault-provider-configs/{id_or_name} openapi: 3.1.0 info: description: Developer tools and cloud infrastructure for AI agents to use web browsers title: Kernel API version: 0.1.0 servers: - description: API Server url: https://api.onkernel.com security: - bearerAuth: [] tags: - description: Create and manage browser sessions. name: Browsers - description: Control mouse, keyboard, and screen on the browser instance. name: Browser Computer Controls - description: Execute Playwright code against the browser instance. name: Browser Playwright - description: Discover and invoke native page tools across the browser instance. name: Browser WebMCP - description: Read, write, and manage files on the browser instance. name: Browser Filesystem - description: Execute and manage processes on the browser instance. name: Browser Processes - description: Record and manage browser session video replays. name: Browser Replays - description: Stream logs from the browser instance. name: Browser Logs - description: >- Stream live telemetry events from a browser session, and manage the destinations sessions export them to. name: Browser Telemetry - description: Create, list, retrieve, and delete browser profiles. name: Profiles - description: Create and manage proxy configurations for routing browser traffic. name: Proxies - description: Create, list, retrieve, and delete browser extensions. name: Extensions - description: Create and manage browser pools for acquiring and releasing browsers. name: Browser Pools - description: Inspect the identity and authorization context for the current request. name: Authentication - description: >- Create and manage auth connections for automated credential capture and login. name: Managed Auth - description: Create and manage credentials for authentication. name: Credentials - description: Configure external credential providers like 1Password. name: Credential Providers - description: List applications and versions. name: Apps - description: Create and manage app deployments and stream deployment events. name: Deployments - description: Invoke actions and stream or query invocation status and events. name: Invocations - description: Read and manage organization-level limits. name: Organization - description: | Create and manage projects for resource isolation within an organization. When projects are disabled for the organization, project operations return `404` with code `projects_disabled`. name: Projects - description: Create and manage API keys for organization and project-scoped access. name: API Keys - description: Read audit log records for the authenticated organization. name: Audit Logs - description: Resolve browser and proxy recommendations for bot-protected sites. name: Config Registry paths: /vault-provider-configs/{id_or_name}: parameters: - description: Provider configuration ID or name in the organization. in: path name: id_or_name required: true schema: type: string patch: tags: - Vaults summary: Update a provider configuration description: >- Update the supplied fields; omitted fields remain unchanged. Names must remain unique within the organization. Requires an organization-scoped credential or dashboard authentication; project-scoped credentials receive 403. operationId: patchVaultProviderConfig requestBody: content: application/json: examples: agentcard: summary: >- Rotate the secret of the AgentCard configuration selected in the path value: credentials: client_secret: example-rotated-client-secret link: summary: Rename the Link configuration selected in the path value: name: renamed-link-client schema: $ref: '#/components/schemas/VaultProviderConfigUpdateRequest' required: true responses: '200': content: application/json: examples: agentcard: $ref: '#/components/examples/ExampleAgentCardConfigRotated' link: $ref: '#/components/examples/ExampleLinkConfigRenamed' schema: $ref: '#/components/schemas/VaultProviderConfig' description: Provider configuration updated without returning secrets '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '500': $ref: '#/components/responses/InternalError' security: - bearerAuth: [] components: schemas: VaultProviderConfigUpdateRequest: additionalProperties: false description: >- Update a provider configuration. Omitted fields are left unchanged. Renaming preserves wallet bindings. Credential updates apply to all wallets using this configuration. Provider and client ID are immutable; changing clients requires a new configuration. The selected configuration determines how credentials are validated; its identity and mode must not change during secret rotation. properties: credentials: additionalProperties: false description: >- Fields to update. Omitted credentials are left unchanged. A rejected update leaves existing credentials unchanged. properties: client_secret: minLength: 1 type: string writeOnly: true type: object writeOnly: true name: description: Unique within the organization. pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string type: object VaultProviderConfig: discriminator: mapping: agentcard: $ref: '#/components/schemas/VaultAgentCardProviderConfig' link: $ref: '#/components/schemas/VaultLinkProviderConfig' propertyName: provider oneOf: - $ref: '#/components/schemas/VaultLinkProviderConfig' - $ref: '#/components/schemas/VaultAgentCardProviderConfig' VaultAgentCardProviderConfig: additionalProperties: false description: >- Response schema for an AgentCard configuration, without secret credentials. Kernel generates the ID and timestamps and introspects test_mode from the credentials. Configuration creation uses VaultAgentCardProviderConfigRequest. properties: client_id: type: string created_at: format: date-time readOnly: true type: string id: readOnly: true type: string name: pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string provider: enum: - agentcard type: string test_mode: description: >- Introspected mode of the selected credential; true means sandbox objects. readOnly: true type: boolean updated_at: format: date-time readOnly: true type: string required: - id - name - provider - client_id - test_mode - created_at - updated_at type: object VaultLinkProviderConfig: additionalProperties: false description: >- Response schema for a Link configuration, without secret credentials. Kernel generates the ID and timestamps. Configuration creation uses VaultLinkProviderConfigRequest. properties: client_id: description: >- OAuth client identity; immutable. Secret credentials are never returned. type: string created_at: format: date-time readOnly: true type: string id: readOnly: true type: string name: description: Unique within the organization. pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string provider: enum: - link type: string updated_at: format: date-time readOnly: true type: string required: - id - name - provider - client_id - created_at - updated_at type: object Error: properties: code: description: Application-specific error code (machine-readable) example: bad_request type: string details: description: Additional error details (for multiple errors) items: $ref: '#/components/schemas/ErrorDetail' type: array inner_error: $ref: '#/components/schemas/ErrorDetail' message: description: Human-readable error description for debugging example: 'Missing required field: app_name' type: string required: - code - message type: object ErrorDetail: properties: code: description: Lower-level error code providing more specific detail example: invalid_input type: string message: description: Further detail about the error example: Provided version string is not semver compliant type: string type: object examples: ExampleAgentCardConfigRotated: summary: Rotating the secret preserves client identity and mode value: client_id: example-client-id created_at: '2026-01-01T12:00:00Z' id: vpc_agentcard_example name: my-agentcard provider: agentcard test_mode: false updated_at: '2026-01-02T12:00:00Z' ExampleLinkConfigRenamed: summary: Renaming preserves the configuration ID and wallet bindings value: client_id: example-client-id created_at: '2026-01-01T12:00:00Z' id: vpc_link_example name: renamed-link-client provider: link updated_at: '2026-01-02T12:00:00Z' responses: BadRequest: content: application/json: schema: $ref: '#/components/schemas/Error' description: Bad Request – invalid input Unauthorized: content: application/json: schema: $ref: '#/components/schemas/Error' description: Unauthorized – missing or invalid authorization token Forbidden: content: application/json: schema: $ref: '#/components/schemas/Error' description: Forbidden – insufficient permissions or plan NotFound: content: application/json: schema: $ref: '#/components/schemas/Error' description: Resource not found Conflict: content: application/json: schema: $ref: '#/components/schemas/Error' description: Conflict – resource already exists InternalError: content: application/json: schema: $ref: '#/components/schemas/Error' description: Internal Server Error securitySchemes: bearerAuth: scheme: bearer type: http ````