---
title: "Update"
method: POST
path: "/api/v1/iam/external_oauth_clients/update"
tags: ["External OAuth Client"]
---

# Update

`POST /api/v1/iam/external_oauth_clients/update`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/iam/external_oauth_clients/update`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

Update edits a static client through an explicit field mask. client_id,
 client_id_type, and the auth method are immutable. Update never mints,
 clears, or returns secret material.

## Request body

- C1ApiIamV1ExternalOAuthClientServiceUpdateRequest: The ExternalOAuthClientServiceUpdateRequest message.
  - `clientId` string: The clientId field.
  - `clientName` string: Replacement display name shown on the consent screen and in the admin list.
  - `publicJwks` string: Replacement RFC 7517 JWK Set. Only accepted for a client that already authenticates with private_key_jwt.
  - `redirectUris` string[], nullable: Replacement exact redirect set. A client always keeps at least one redirect URI.
  - `updateMask` string, nullable

## Response `200`

Successful response

- C1ApiIamV1ExternalOAuthClientServiceUpdateResponse: The ExternalOAuthClientServiceUpdateResponse message.
  - `client` C1ApiIamV1ExternalOAuthClientInfo: ExternalOAuthClientInfo is the API representation of an ExternalOAuthClient.
    - `authMethod` 'EXTERNAL_O_AUTH_CLIENT_AUTH_METHOD_UNSPECIFIED' | 'EXTERNAL_O_AUTH_CLIENT_AUTH_METHOD_CLIENT_SECRET_BASIC' | 'EXTERNAL_O_AUTH_CLIENT_AUTH_METHOD_CLIENT_SECRET_POST' | 'EXTERNAL_O_AUTH_CLIENT_AUTH_METHOD_PRIVATE_KEY_JWT': Token-endpoint authentication method. Populated for static clients.
    - `clientId` string: The clientId field.
    - `clientIdType` 'CLIENT_ID_TYPE_UNSPECIFIED' | 'CLIENT_ID_TYPE_DCR' | 'CLIENT_ID_TYPE_METADATA_URL' | 'CLIENT_ID_TYPE_APP' | 'CLIENT_ID_TYPE_STATIC': The clientIdType field.
    - `clientIdUrl` string: The clientIdUrl field.
    - `clientName` string: The clientName field.
    - `createdAt` string, date-time, nullable
    - `redirectUris` string[], nullable: Registered redirect URIs. Populated for static clients; DCR/CIMD derive their redirect set from the registration or metadata document.
    - `softwareId` string: DCR software_id from the client metadata document (empty for CIMD clients).
    - `updatedAt` string, date-time, nullable
    - `verifiedDomain` string: Verified domain from client_id_url (e.g. "cursor.com"). Empty for DCR clients.
    - `wellKnownClient` 'WELL_KNOWN_CLIENT_UNSPECIFIED' | 'WELL_KNOWN_CLIENT_UNKNOWN' | 'WELL_KNOWN_CLIENT_CLAUDE_AI' | 'WELL_KNOWN_CLIENT_CLAUDE_DESKTOP' | 'WELL_KNOWN_CLIENT_CLAUDE_CODE' | 'WELL_KNOWN_CLIENT_MCP_INSPECTOR' | 'WELL_KNOWN_CLIENT_CHATGPT' | 'WELL_KNOWN_CLIENT_VSCODE' | 'WELL_KNOWN_CLIENT_CURSOR' | 'WELL_KNOWN_CLIENT_WINDSURF' | 'WELL_KNOWN_CLIENT_ZED' | 'WELL_KNOWN_CLIENT_JETBRAINS' | 'WELL_KNOWN_CLIENT_DOCKER_MCP_TOOLKIT': The wellKnownClient field.

## Changes

- **2026-10-20** `fe943bedf41b`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/iam/external_oauth_clients/update/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)