---
title: "Update Secret Store"
method: PATCH
path: "/organization/secret-stores/{store_id}"
tags: ["organization-secret-stores"]
---

# Update Secret Store

`PATCH /organization/secret-stores/{store_id}`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/organization/secret-stores/{store_id}`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

Update store metadata. The external ID never changes.

## Path parameters

- `store_id` string, uuid, required

## Request body

- SecretStoreUpdate: Update an organization-owned secret store. Server-owned fields are immutable.
  - `name` string, nullable
  - `description` string, nullable
  - `config` AwsSecretsManagerStoreUpdate: Client-supplied fields when updating an AWS Secrets Manager store.
    - `role_arn` string, nullable
    - `region` string, nullable
  - `enabled` boolean, nullable
  - `all_workspaces` boolean: Allow all current and future workspaces.

## Response `204`

Successful Response

## Other responses

- `422`: Unprocessable Entity

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)