---
title: "POST /update-mcp-secret-oauth-client-credentials"
method: POST
path: "/update-mcp-secret-oauth-client-credentials"
tags: ["General"]
---

# POST /update-mcp-secret-oauth-client-credentials

`POST /update-mcp-secret-oauth-client-credentials`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/update-mcp-secret-oauth-client-credentials`
- Auth: none declared

## Request body

- UpdateMcpSecretOAuthClientCreds
  - `accessibility` string: for personal password manager
  - `ara-enabled` boolean, nullable: Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs. AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag.
  - `enable-agentic-runtime-authority` boolean, nullable: EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working.
  - `enable-ai-quorum` boolean, nullable: Turns on AI Quorum checks for this item.
  - `input-rule` string[]: Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input)
  - `json` boolean: Set output format to JSON
  - `keep-prev-version` string: Whether to keep previous version [true/false]. If not set, use default according to account settings
  - `key` string
  - `last-version` integer
  - `name` string, required: Secret name
  - `oauth-client-id` string: OAuth client ID
  - `oauth-client-secret` string: OAuth client secret
  - `oauth-scopes` string[]: OAuth scopes
  - `oauth-token-url` string: OAuth token URL
  - `output-rule` string[]: Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `url` string: URL of the service

## Response `200`

- UpdateSecretValOutput
  - `name` string

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/account-settings.md) - [All operations](https://skmtc.dev/akeyless/apis/account-settings/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/account-settings/revisions/6beb28d274ac?raw)