---
title: "Update an authentication configuration"
method: PATCH
path: "/api/v3/auth_configs/{nanoid}"
tags: ["Auth Configs"]
---

# Update an authentication configuration

`PATCH /api/v3/auth_configs/{nanoid}`

Modifies an existing authentication configuration with new credentials or other settings. Only specified fields will be updated.

## Path parameters

- `nanoid` string, authConfigId, required — The unique identifier of the authentication configuration to update

## Request body

- union
  - CustomAuthConfigUpdate
    - `type` 'custom', required
    - `name` string — The display name of the authentication configuration
    - `credentials` object
      - `scopes` union — OAuth scopes requested for the auth config.
        - string
        - string[]
      - `user_scopes` union — OAuth user-token scopes requested for the auth config. This is primarily used by Slack OAuth v2.
        - string
        - string[]
    - `sealed_credentials` object — [EXPERIMENTAL] Client-sealed secret fields to redeem through the organization keyring instance (GET /api/v3.1/keyring/transfer_keys). The plaintext must not also appear in credentials. Rotates the stored client_secret without Apollo ever holding it.
    - `proxy_config` object, nullable
      - `proxy_url` string, uri, required — The url of the auth proxy
      - `proxy_auth_key` string — The auth key for the auth proxy
    - `restrict_to_following_tools` string[] — Use tool_access_config instead. This field will be deprecated in the future.
    - `tool_access_config` object
      - `tools_for_connected_account_creation` string[] — Tools used to generate the minimum required scopes for the auth config (only valid for OAuth). If passed, this will update the scopes.
      - `tools_available_for_execution` string[] — The actions that the user can perform on the auth config. If passed, this will update the actions that the user can perform on the auth config.
    - `shared_credentials` object — Shared credentials inherited by all connected accounts using this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged.
    - `is_enabled_for_tool_router` boolean — Whether this auth config is enabled for tool router
  - DefaultAuthConfigUpdate
    - `type` 'default', required
    - `name` string — The display name of the authentication configuration
    - `scopes` union — OAuth scopes requested for the auth config.
      - string
      - string[]
    - `user_scopes` union — OAuth user-token scopes requested for the auth config. This is primarily used by Slack OAuth v2.
      - string
      - string[]
    - `restrict_to_following_tools` string[] — Use tool_access_config instead. This field will be deprecated in the future.
    - `tool_access_config` object
      - `tools_for_connected_account_creation` string[] — Tools used to generate the minimum required scopes for the auth config (only valid for OAuth). If passed, this will update the scopes.
      - `tools_available_for_execution` string[] — The actions that the user can perform on the auth config. If passed, this will update the actions that the user can perform on the auth config.
    - `shared_credentials` object — Shared credentials inherited by all connected accounts using this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged.
    - `is_enabled_for_tool_router` boolean — Whether this auth config is enabled for tool router

## Response `200`

Successfully updated auth config

- object
  - `success` boolean, required — Whether the auth config was updated
  - `message` string, required — A human-readable result message

## Other responses

- `400` — Bad request - Invalid input or credentials format
- `401` — Unauthorized - Authentication required
- `404` — Not found - Auth configuration does not exist
- `500` — Internal server error - Something went wrong on the server

## Changes

- **2026-08-18** `0d00d8bf42bf` — 1 info
  - added request discriminator
- **2026-08-17** `42c590643dfb` — 1 warning, 1 info
  - removed the request property `oneOf[subschema #1]/experimental`
  - added the new optional request property `oneOf[subschema #1]/sealed_credentials`
- **2026-08-15** `f6e415e39569` — 1 info
  - added the new optional request property `oneOf[subschema #1]/experimental`

[Change history](https://skmtc.dev/composiohq/apis/composio-platform-api/changes/api/v3/auth_configs/:nanoid/patch.md)

---

[API](https://skmtc.dev/composiohq/apis/composio-platform-api.md) · [All operations](https://skmtc.dev/composiohq/apis/composio-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/composiohq/composio-platform-api/revisions/368fb7851f42/schema)