---
title: "Update a user-defined runtime validation application input"
method: POST
path: "/api/v2/runtimeValidation/updateApplicationInput"
tags: ["Runtime Validation"]
---

# Update a user-defined runtime validation application input

`POST /api/v2/runtimeValidation/updateApplicationInput`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/runtimeValidation/updateApplicationInput`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Modify the key, title, description, sensitivity hint, display order, or saved value for an existing user-defined runtime validation input. Omitted fields are preserved, null clears a saved value, and non-null values are encrypted. Generated prompts cannot be modified through this route; saveApplicationInputs should be used only to save or clear their values.

## Request body

- RuntimeValidationUpdateApplicationInputRequest
  - `organizationId` string
  - `profileId` string, required
  - `inputId` string, required: Runtime validation input id returned by getApplicationProfile. Only user-defined inputs can be updated.
  - `key` string: Optional stable input key after the update. Changing this key renames the user-defined prompt. Omit to preserve the existing key.
  - `title` string: Optional human-readable label for the input prompt.
  - `description` string: Optional replacement description for what the validator should receive in this field, including any expected format or resource type.
  - `sensitive` boolean: Optional display hint for credentials or secrets. Values are encrypted either way.
  - `sortOrder` integer: Optional display order. Omit to preserve the existing order.
  - `value` union: Optional replacement value. Omit to keep the current saved value, use null to clear it, or provide a non-null value to encrypt and store it.
    - string
    - number
    - boolean
    - unknown[]
      - unknown
    - object

## Response `200`

Updated redacted input state

- RuntimeValidationSaveApplicationInputsResponse
  - `profileId` string, required
  - `status` 'NOT_ANALYZED' | 'NOT_TESTABLE' | 'NEEDS_INPUT' | 'READY' | 'ERROR', required: Persistent Runtime Validation readiness status for an application profile. READY profiles can be validated against eligible full scans.
  - `inputSummary` RuntimeValidationInputSummary, required
    - `required` integer, required
    - `provided` integer, required
    - `missing` integer, required
  - `inputs` RuntimeValidationApplicationInput[], required
    - `id` string, required
    - `key` string, required
    - `title` string, required
    - `description` string, required
    - `sensitive` boolean, required
    - `sortOrder` integer, required
    - `source` 'GENERATED' | 'USER_DEFINED', required: Whether a runtime validation input prompt was generated from application analysis or manually added by a user/MCP client.
    - `value` union, required: Redacted value metadata. The encrypted value is never returned through normal runtime validation profile routes.
      - object
        - `state` 'missing', required
      - object
        - `state` 'present', required
        - `updatedAt` string, date-time, nullable, required
        - `updatedByUserId` string, nullable, required
        - `expiresAt` string, date-time, nullable, required
        - `expired` boolean, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `403`: Error Response
- `404`: Error Response
- `409`: Error Response
- `412`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)