---
title: "Update"
method: POST
path: "/api/v1/settings/session"
tags: ["Session Settings"]
---

# Update

`POST /api/v1/settings/session`

Update modifies the session security settings for the tenant, such as session length and IP allowlists.

## Request body

- C1ApiSettingsV1UpdateSessionSettingsRequest — The UpdateSessionSettingsRequest message.
  - `sessionSettings` C1ApiSettingsV1SessionSettings — SessionSettings configures session security for the tenant, including timeouts and per-role IP restrictions.
    - `clientIdApprovalRequestPolicyId` string — Policy ID for REQUESTABLE mode approval routing.
    - `clientIdMetadataDocumentPolicy` 'CLIENT_ID_METADATA_DOCUMENT_POLICY_UNSPECIFIED' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOW_ALL' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_REQUESTABLE' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOWLIST_ONLY' — Policy for metadata document client_id URLs.
    - `connectorSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientsEnabled` boolean — Enable external client registration (OAuth 2.0 DCR) for MCP clients like Claude Desktop, Cursor, and other AI assistants.
    - `maxSessionLength` string, duration, nullable
    - `pccAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `pccUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
  - `updateMask` string, nullable

## Response `200`

Successful response

- C1ApiSettingsV1UpdateSessionSettingsResponse — The UpdateSessionSettingsResponse message.
  - `sessionSettings` C1ApiSettingsV1SessionSettings — SessionSettings configures session security for the tenant, including timeouts and per-role IP restrictions.
    - `clientIdApprovalRequestPolicyId` string — Policy ID for REQUESTABLE mode approval routing.
    - `clientIdMetadataDocumentPolicy` 'CLIENT_ID_METADATA_DOCUMENT_POLICY_UNSPECIFIED' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOW_ALL' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_REQUESTABLE' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOWLIST_ONLY' — Policy for metadata document client_id URLs.
    - `connectorSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientsEnabled` boolean — Enable external client registration (OAuth 2.0 DCR) for MCP clients like Claude Desktop, Cursor, and other AI assistants.
    - `maxSessionLength` string, duration, nullable
    - `pccAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `pccUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.

## Changes

- **2026-08-21** `f2cf3228f366` — 4 breaking, 20 warning, 1 info
  - the request property `updateMask` became not nullable
  - the `sessionSettings` request property type/format changed from `object`/`` to ``/``
  - added `#/components/schemas/c1.api.settings.v1.SessionSettings, subschema #2` to the `sessionSettings` response property `oneOf` list for the response status `200`
  - the `sessionSettings` response's property type/format changed from `object`/`` to ``/`` for status `200`
  - …21 more
- **2026-03-10** `7fa698b04b81` — 4 info
  - added the new optional request property `sessionSettings/clientIdApprovalRequestPolicyId`
  - added the new optional request property `sessionSettings/clientIdMetadataDocumentPolicy`
  - added the optional property `sessionSettings/clientIdApprovalRequestPolicyId` to the response with the `200` status
  - added the optional property `sessionSettings/clientIdMetadataDocumentPolicy` to the response with the `200` status
- **2026-02-05** `417c5bf9b0a2` — 4 info
  - added the new optional request property `sessionSettings/externalClientSource`
  - added the new optional request property `sessionSettings/externalClientsEnabled`
  - added the optional property `sessionSettings/externalClientSource` to the response with the `200` status
  - added the optional property `sessionSettings/externalClientsEnabled` to the response with the `200` status
- **2025-04-10** `17f9f3bcedd5` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/settings/session/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) · [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)