---
title: "Save runtime validation application inputs"
method: POST
path: "/api/v2/runtimeValidation/saveApplicationInputs"
tags: ["Runtime Validation"]
---

# Save runtime validation application inputs

`POST /api/v2/runtimeValidation/saveApplicationInputs`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/runtimeValidation/saveApplicationInputs`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Persist user-provided values for runtime validation input prompts. Plain strings are accepted. Omitted keys are unchanged, null clears a saved value, and every non-null value is encrypted before storage. Saving recomputes the profile status to READY only when all required inputs have values.

## Request body

- RuntimeValidationSaveApplicationInputsRequest
  - `organizationId` string
  - `profileId` string, required
  - `values` object, required: Map from runtime validation input key to value. Omitted keys are left unchanged. A null value explicitly clears the stored ciphertext for that input. Non-null values are serialized and encrypted before storage.

## Response `200`

Updated redacted input state

- RuntimeValidationSaveApplicationInputsResponse
  - `profileId` string, required
  - `status` 'NOT_ANALYZED' | 'NOT_TESTABLE' | 'NEEDS_INPUT' | 'READY' | 'ERROR', required: Persistent Runtime Validation readiness status for an application profile. READY profiles can be validated against eligible full scans.
  - `inputSummary` RuntimeValidationInputSummary, required
    - `required` integer, required
    - `provided` integer, required
    - `missing` integer, required
  - `inputs` RuntimeValidationApplicationInput[], required
    - `id` string, required
    - `key` string, required
    - `title` string, required
    - `description` string, required
    - `sensitive` boolean, required
    - `sortOrder` integer, required
    - `source` 'GENERATED' | 'USER_DEFINED', required: Whether a runtime validation input prompt was generated from application analysis or manually added by a user/MCP client.
    - `value` union, required: Redacted value metadata. The encrypted value is never returned through normal runtime validation profile routes.
      - object
        - `state` 'missing', required
      - object
        - `state` 'present', required
        - `updatedAt` string, date-time, nullable, required
        - `updatedByUserId` string, nullable, required
        - `expiresAt` string, date-time, nullable, required
        - `expired` boolean, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `403`: Error Response
- `404`: Error Response
- `409`: Error Response
- `412`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)