PRprimitive
Credentials

Change the credential policy

Change one or more policy rules. Admins may only tighten the policy; loosening any rule needs an owner. Owners and admins are emailed about every change. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled.

Person only: a dashboard session. The person's role must hold credential_policy:manage. API keys, agent connection keys and agents are refused.

patch/credential-policy

Request

  • Base URL
    https://api.primitive.dev/v1
  • URL
    https://api.primitive.dev/v1/credential-policy
  • Auth
    HTTP bearer

Request body

max_key_lifetime_daysinteger nullable
require_key_expiryboolean
super_admin_key_creators'owners_and_admins' | 'owners'
members_may_mint_keysboolean
allow_org_mail_scope_keysboolean
cap_agents_below_personboolean
removal_suspends_createdboolean
oauth_consent_admin_onlyboolean
cli_access'owners_admins_and_operators' | 'owners_and_admins' | 'all_members' | 'off'

Response

Success

successtrue required

Changes

No operation changes recorded.