members

Update org-level policy settings.

Toggles org-level policy flags. Each field has its own capability requirement — the path orgId must always match the caller's own organization. Exposes allowMemberApiKeys (DVT-342, requires apikey:manage): when true, non-admin members may create, list, and revoke their own API keys. Also exposes linkedSheetsEnabled (ADR-0078 R1, DVT-2935/DVT-3220, requires connection:manage): the admin kill switch for native linked sheets in snowflake mode, replacing the per-connection linkedBaseOptIn ack. On by default (DVT-5637): an unset value reads true; send false to turn linked sheets off. Also exposes claudeOauthClientId (DVT-5116, requires connection:manage): the org's company Claude connector OAuth client ID. At least one field must be present; several may be set in the same request if the caller holds every required capability.

patch/v1/orgs/{orgId}/settings

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/v1/orgs/{orgId}/settings
  • Auth: one of:
    • API key in cookie dvt_session
    • HTTP bearer

Request body

allowMemberApiKeysboolean

When true, members may create their own API keys without the admin or owner role. Admins/owners always retain full key management regardless.

linkedSheetsEnabledboolean

When true, the org may use native linked sheets in snowflake mode (ADR-0078 R1, DVT-2935/DVT-3220). Requires connection:manage.

claudeOauthClientIdstring

The org's company Claude connector OAuth client ID (DVT-5116). Trimmed server-side; an empty (or whitespace-only) string clears it. Non-empty values must be at most 256 characters matching ^[A-Za-z0-9+/=._-]+$. Not a secret — shown to every org member on GET /v1/me → org.claudeOauthClientId. Requires connection:manage.

Response

Settings updated.

Changes

No recorded changes to this operation across all 1 revision of this API.