---
title: "Update organization settings"
method: PUT
path: "/organization-settings"
tags: ["OrganizationSettings", "Beta"]
---

# Update organization settings

`PUT /organization-settings`

## Request

- Base URL: `https://public.escape.tech/v3`
- URL: `https://public.escape.tech/v3/organization-settings`
- Auth: API key in header `X-ESCAPE-API-KEY`

Update the organization issue SLA policy and the organization-wide AI system prompt. Requires organization admin rights. Read-only scan kill switches cannot be changed here. Organization settings toggles (project propagation, scoped webhook export) are not writable through the public API because the internal mutation replaces the whole settings list and would drop settings the public API cannot see.

## Request body

- object
  - `aiSystemPrompt` string, nullable: The organization-wide AI system prompt. Pass an empty string to clear it.
  - `slas` object[]: The issue SLA policy entries to update, keyed by severity
    - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM', required: The issue severity
    - `timeMs` integer, required: The SLA deadline for this severity, in milliseconds
    - `enabled` boolean, required: Whether the SLA is enforced for this severity

## Response `200`

OK

- object
  - `slas` object[], required: The issue SLA policy per severity
    - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM', required: The issue severity
    - `timeMs` integer, required: The SLA deadline for this severity, in milliseconds
    - `enabled` boolean, required: Whether the SLA is enforced for this severity
  - `aiSystemPrompt` string, nullable, required: The organization-wide AI system prompt, or null when not configured
  - `settings` string[], required: The organization settings, including the read-only kill switches
  - `killSwitches` object, required: Read-only org-wide scan kill switches. They can only be changed from the Escape dashboard, never through the public API.
    - `dast` boolean, required: Read-only: whether DAST scans are disabled for the organization
    - `aiPentesting` boolean, required: Read-only: whether AI pentesting scans are disabled for the organization
    - `asm` boolean, required: Read-only: whether ASM scans are disabled for the organization
  - `scannerConfiguration` object, nullable, required: Metadata of the latest organization-wide scanner configuration, or null when none exists
    - `id` string, uuid, required: The scanner configuration ID
    - `createdAt` string, date-time, required: When this scanner configuration was created

## Other responses

- `400`: Bad Request
- `403`: Forbidden

---

[API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)