---
title: "Update Credential"
method: PUT
path: "/password-vault/credentials"
tags: ["Password Vault"]
---

# Update Credential

`PUT /password-vault/credentials`

## Request

- Base URL: `https://console.jumpcloud.com/api/v2`
- URL: `https://console.jumpcloud.com/api/v2/password-vault/credentials`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/docs/password-vault/credentials/put.ts> (a function with typed inputs; its response is checked against the schema)

Create or update a password vault credential.

## Request body

- JumpcloudPrivilegedAccessUpsertCredentialRequest
  - `accessPolicies` JumpcloudPrivilegedAccessAccessPolicies
    - `groups` JumpcloudPrivilegedAccessGroupAccess[]
      - `id` integer
      - `isResourceManager` boolean: Reply enrichment only — not persisted on upsert.
      - `name` string
      - `permissions` string[]
    - `isPrivate` boolean
    - `users` JumpcloudPrivilegedAccessUserAccess[]
      - `email` string
      - `id` integer
      - `isAdmin` boolean
      - `isUser` boolean: Reply enrichment only — not persisted on upsert.
      - `name` string
      - `permissions` string[]
  - `approverRequiresJustification` boolean
  - `approvers` string[]
  - `connectionString` string
  - `credentialRotationId` string: Resource id of the linked server that performs automated password rotation for this credential, or empty to disable rotation. This is the *resource* id (LinkedServer.resource_id), not the link id -- VaultOne compares it against Link.ResourceMetaId. RotationEnabled is derived from whether this is set, so there is no separate enable flag: clearing it is what turns rotation off. Only servers already linked to the credential are valid; list them with ListLinkedServers.
  - `credentialType` 'UNDEFINED' | 'PASSWORD' | 'KEY' | 'CONNECTION_STRING' | 'SECURE_NOTE' | 'TWO_FA' | 'CREDIT_CARD' | 'ID_CARD' | 'IDENTITY'
  - `creditCard` JumpcloudPrivilegedAccessCreditCardSection
    - `metadata` JumpcloudPrivilegedAccessCreditCardMetadata
      - `cardholderName` string
      - `expiryMonth` string
      - `expiryYear` string
      - `last4Digits` string
    - `secret` JumpcloudPrivilegedAccessCreditCardSecret
      - `cardNumber` string
      - `cvv` string
  - `domain` string
  - `editLinkedWebsites` boolean
  - `expirationDate` string
  - `folderId` string, byte
  - `id` string, byte
  - `idCard` JumpcloudPrivilegedAccessIdCardSection
    - `metadata` JumpcloudPrivilegedAccessIdCardMetadata
      - `country` string
      - `idCardExpirationDate` string
      - `idType` string
      - `issuanceDate` string
      - `nameOnId` string
    - `secret` JumpcloudPrivilegedAccessIdCardSecret
      - `idNumber` string
  - `identity` JumpcloudPrivilegedAccessIdentityMetadata
    - `city` string
    - `country` string
    - `email` string
    - `firstAddressLine` string
    - `firstName` string
    - `gender` string
    - `lastName` string
    - `middleName` string
    - `phone` string
    - `secondAddressLine` string
    - `title` string
    - `zipCode` string
  - `key` JumpcloudPrivilegedAccessKeySection
    - `passphrase` string
    - `privateKey` string
    - `publicKey` string
  - `linkedWebsites` JumpcloudPrivilegedAccessLinkedWebsite[]
    - `id` string, byte
    - `name` string
    - `permissions` string[]
    - `uri` string
  - `mfaEnabled` boolean
  - `mfaKey` string
  - `name` string
  - `notes` string
  - `password` string
  - `passwordStrength` integer
  - `requiredApprovers` boolean
  - `secureNote` JumpcloudPrivilegedAccessSecureNote
    - `note` string
  - `sequentialApprovers` boolean
  - `tags` string
  - `twoFa` JumpcloudPrivilegedAccessTwoFa
    - `twoFaSecret` string
  - `username` string

## Response `200`

A successful response.

- JumpcloudPrivilegedAccessUpsertCredentialReply
  - `id` string, byte

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/revisions/3f09fe63caaa?raw)