---
title: "🛡️ Update the Remote Access connection paths."
method: PUT
path: "/api/v1/connect/settings"
tags: ["Remote Access"]
---

# 🛡️ Update the Remote Access connection paths.

`PUT /api/v1/connect/settings`

Enables or disables direct and relayed connections independently. Both are on while Remote Access is enabled unless turned off here.<br /><hr /><h3>🛡️ Requires Capabilities: <code>ServerSettings.Update</code></h3>

## Request body

- UpdateConnectSettingsDto
  - `directEnabled` boolean — Whether clients may connect straight to this server. Turning it off stops the Remote Access HTTPS listener.
  - `relayEnabled` boolean — Whether clients may reach this server through Cardinal's metered relay.

## Response `200`

- ConnectStatusResponse
  - `enabled` boolean, required — Whether Remote Access is enabled on this server.
  - `state` 'disconnected' | 'connecting' | 'connected' | 'auth_failed', required — Live state of the control channel to the Remote Access Server.
  - `hostname` string, nullable, required — The hostname assigned by the Remote Access Server, once registered.
  - `signingKeyFingerprint` string, nullable, required — Truncated SHA-256 fingerprint of the probe signing key, for support diagnostics.
  - `tokenExpiresAt` string, nullable, required — Expiry of the stored cloud credential, ISO 8601.
  - `directEnabled` boolean, required — Whether clients may connect straight to this server.
  - `relayEnabled` boolean, required — Whether clients may reach this server through Cardinal's metered relay.
  - `publicPort` number, nullable, required — The externally reachable port advertised to the Remote Access Server.
  - `directUrl` string, nullable, required — The URL clients use to reach this server directly. Null until a hostname is assigned.
  - `relayUrl` string, nullable, required — The URL clients use to reach this server through the relay.
  - `https` ConnectHttpsStatus, required
    - `state` 'stopped' | 'running' | 'error', required — State of the Remote Access HTTPS listener, which serves direct connections.
    - `port` number, nullable, required — The port the listener is bound to, once running.
    - `certExpiresAt` string, nullable, required — Expiry of the TLS certificate in use, ISO 8601.
    - `lastError` string, nullable, required — Why the listener could not start or why cert material was rejected.

## Other responses

- `401` — Possible reasons: The authorization token is invalid.
- `403` — Possible reasons: The user does not have sufficent capabilities.

## Changes

- **2026-08-14** `c3d02ccf7004` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/cardinalapps/apis/cardinal-media-server-api/changes/api/v1/connect/settings/put.md)

---

[API](https://skmtc.dev/cardinalapps/apis/cardinal-media-server-api.md) · [All operations](https://skmtc.dev/cardinalapps/apis/cardinal-media-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cardinalapps/cardinal-media-server-api/revisions/c3d02ccf7004/schema)