---
title: "Update App Key"
method: PATCH
path: "/v2/appkeys/{key_id}"
tags: ["Token"]
---

# Update App Key

`PATCH /v2/appkeys/{key_id}`

## Request

- Base URL: `https://api.loyalty.dog`
- URL: `https://api.loyalty.dog/v2/appkeys/{key_id}`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/loyalty/apis/loyaltydog/docs/v2/appkeys/:key_id/patch.ts> (a function with typed inputs; its response is checked against the schema)

Set the CIDR allowlist on a hashed public API key (SWE-1142).

Empty list allows any IP. JWT app keys reject this endpoint.
Dashboard / admin session JWT only.

## Path parameters

- `key_id` string, required

## Headers

- `authorization` string, nullable

## Request body

- AppKeyUpdateRequest: Hashed-key IP allowlist (SWE-1142). JWT app keys reject this endpoint.
  - `ipAllowlist` string[], required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-09-08** `a15e6601ef8d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/loyalty/apis/loyaltydog/changes/v2/appkeys/:key_id/patch.md)

---

[API](https://skmtc.dev/loyalty/apis/loyaltydog.md) - [All operations](https://skmtc.dev/loyalty/apis/loyaltydog/llms.txt) - [OpenAPI document](https://skmtc.dev/loyalty/apis/loyaltydog/revisions/5803242b0551?raw)