Rename a credential, rotate its reference, or change its egress bounds

curl --request PATCH \
  --url https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowed_hosts": [
    "example"
  ],
  "display_name": "example-name",
  "injection_locations": [
    "headers"
  ],
  "integration_permission": "example",
  "integration_resources": [
    "example"
  ],
  "labelbox_scope": {
    "mode": "projects",
    "project_ids": [
      "project-id"
    ]
  },
  "metadata": {
    "key": "example"
  },
  "network_mode": "limited",
  "secret_name": "example",
  "secret_ref": "example",
  "secret_value": "example"
}
'

import requests

url = "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}"

payload = {
    "allowed_hosts": ["example"],
    "display_name": "example-name",
    "injection_locations": ["headers"],
    "integration_permission": "example",
    "integration_resources": ["example"],
    "labelbox_scope": {
        "mode": "projects",
        "project_ids": ["project-id"]
    },
    "metadata": { "key": "example" },
    "network_mode": "limited",
    "secret_name": "example",
    "secret_ref": "example",
    "secret_value": "example"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PATCH',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    allowed_hosts: ['example'],
    display_name: 'example-name',
    injection_locations: ['headers'],
    integration_permission: 'example',
    integration_resources: ['example'],
    labelbox_scope: {mode: 'projects', project_ids: ['project-id']},
    metadata: {key: 'example'},
    network_mode: 'limited',
    secret_name: 'example',
    secret_ref: 'example',
    secret_value: 'example'
  })
};

fetch('https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
  CURLOPT_POSTFIELDS => json_encode([
    'allowed_hosts' => [
        'example'
    ],
    'display_name' => 'example-name',
    'injection_locations' => [
        'headers'
    ],
    'integration_permission' => 'example',
    'integration_resources' => [
        'example'
    ],
    'labelbox_scope' => [
        'mode' => 'projects',
        'project_ids' => [
                'project-id'
        ]
    ],
    'metadata' => [
        'key' => 'example'
    ],
    'network_mode' => 'limited',
    'secret_name' => 'example',
    'secret_ref' => 'example',
    'secret_value' => 'example'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}"

	payload := strings.NewReader("{\n  \"allowed_hosts\": [\n    \"example\"\n  ],\n  \"display_name\": \"example-name\",\n  \"injection_locations\": [\n    \"headers\"\n  ],\n  \"integration_permission\": \"example\",\n  \"integration_resources\": [\n    \"example\"\n  ],\n  \"labelbox_scope\": {\n    \"mode\": \"projects\",\n    \"project_ids\": [\n      \"project-id\"\n    ]\n  },\n  \"metadata\": {\n    \"key\": \"example\"\n  },\n  \"network_mode\": \"limited\",\n  \"secret_name\": \"example\",\n  \"secret_ref\": \"example\",\n  \"secret_value\": \"example\"\n}")

	req, _ := http.NewRequest("PATCH", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"allowed_hosts\": [\n    \"example\"\n  ],\n  \"display_name\": \"example-name\",\n  \"injection_locations\": [\n    \"headers\"\n  ],\n  \"integration_permission\": \"example\",\n  \"integration_resources\": [\n    \"example\"\n  ],\n  \"labelbox_scope\": {\n    \"mode\": \"projects\",\n    \"project_ids\": [\n      \"project-id\"\n    ]\n  },\n  \"metadata\": {\n    \"key\": \"example\"\n  },\n  \"network_mode\": \"limited\",\n  \"secret_name\": \"example\",\n  \"secret_ref\": \"example\",\n  \"secret_value\": \"example\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"allowed_hosts\": [\n    \"example\"\n  ],\n  \"display_name\": \"example-name\",\n  \"injection_locations\": [\n    \"headers\"\n  ],\n  \"integration_permission\": \"example\",\n  \"integration_resources\": [\n    \"example\"\n  ],\n  \"labelbox_scope\": {\n    \"mode\": \"projects\",\n    \"project_ids\": [\n      \"project-id\"\n    ]\n  },\n  \"metadata\": {\n    \"key\": \"example\"\n  },\n  \"network_mode\": \"limited\",\n  \"secret_name\": \"example\",\n  \"secret_ref\": \"example\",\n  \"secret_value\": \"example\"\n}"

response = http.request(request)
puts response.read_body

{
  "allowed_hosts": [
    "example"
  ],
  "created_at": "2026-02-18T09:30:00.000Z",
  "credential_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "credential_type": "example",
  "display_name": "example-name",
  "injection_locations": [
    "example"
  ],
  "integration_connection_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "integration_permission": "example",
  "integration_resources": [
    "example"
  ],
  "labelbox_scope": {
    "mode": "projects",
    "organization_id": "organization-id",
    "project_ids": [
      "project-id"
    ]
  },
  "mcp_server_url": "https://example.com",
  "metadata": {
    "key": "example"
  },
  "network_mode": "limited",
  "organization_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "platform_mcp_service": "slack_tools",
  "secret_name": "example",
  "secret_ref": "example",
  "updated_at": "2026-02-18T09:30:00.000Z",
  "vault_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d"
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "forbidden",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "unsupported_media_type",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "bad_gateway",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "gateway_timeout",
  "message": "<string>",
  "details": {}
}

PATCH

managed-agents

vaults

{vault_id}

credentials

{credential_id}

Rename a credential, rotate its reference, or change its egress bounds

curl --request PATCH \
  --url https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowed_hosts": [
    "example"
  ],
  "display_name": "example-name",
  "injection_locations": [
    "headers"
  ],
  "integration_permission": "example",
  "integration_resources": [
    "example"
  ],
  "labelbox_scope": {
    "mode": "projects",
    "project_ids": [
      "project-id"
    ]
  },
  "metadata": {
    "key": "example"
  },
  "network_mode": "limited",
  "secret_name": "example",
  "secret_ref": "example",
  "secret_value": "example"
}
'

import requests

url = "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}"

payload = {
    "allowed_hosts": ["example"],
    "display_name": "example-name",
    "injection_locations": ["headers"],
    "integration_permission": "example",
    "integration_resources": ["example"],
    "labelbox_scope": {
        "mode": "projects",
        "project_ids": ["project-id"]
    },
    "metadata": { "key": "example" },
    "network_mode": "limited",
    "secret_name": "example",
    "secret_ref": "example",
    "secret_value": "example"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PATCH',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    allowed_hosts: ['example'],
    display_name: 'example-name',
    injection_locations: ['headers'],
    integration_permission: 'example',
    integration_resources: ['example'],
    labelbox_scope: {mode: 'projects', project_ids: ['project-id']},
    metadata: {key: 'example'},
    network_mode: 'limited',
    secret_name: 'example',
    secret_ref: 'example',
    secret_value: 'example'
  })
};

fetch('https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
  CURLOPT_POSTFIELDS => json_encode([
    'allowed_hosts' => [
        'example'
    ],
    'display_name' => 'example-name',
    'injection_locations' => [
        'headers'
    ],
    'integration_permission' => 'example',
    'integration_resources' => [
        'example'
    ],
    'labelbox_scope' => [
        'mode' => 'projects',
        'project_ids' => [
                'project-id'
        ]
    ],
    'metadata' => [
        'key' => 'example'
    ],
    'network_mode' => 'limited',
    'secret_name' => 'example',
    'secret_ref' => 'example',
    'secret_value' => 'example'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}"

	payload := strings.NewReader("{\n  \"allowed_hosts\": [\n    \"example\"\n  ],\n  \"display_name\": \"example-name\",\n  \"injection_locations\": [\n    \"headers\"\n  ],\n  \"integration_permission\": \"example\",\n  \"integration_resources\": [\n    \"example\"\n  ],\n  \"labelbox_scope\": {\n    \"mode\": \"projects\",\n    \"project_ids\": [\n      \"project-id\"\n    ]\n  },\n  \"metadata\": {\n    \"key\": \"example\"\n  },\n  \"network_mode\": \"limited\",\n  \"secret_name\": \"example\",\n  \"secret_ref\": \"example\",\n  \"secret_value\": \"example\"\n}")

	req, _ := http.NewRequest("PATCH", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"allowed_hosts\": [\n    \"example\"\n  ],\n  \"display_name\": \"example-name\",\n  \"injection_locations\": [\n    \"headers\"\n  ],\n  \"integration_permission\": \"example\",\n  \"integration_resources\": [\n    \"example\"\n  ],\n  \"labelbox_scope\": {\n    \"mode\": \"projects\",\n    \"project_ids\": [\n      \"project-id\"\n    ]\n  },\n  \"metadata\": {\n    \"key\": \"example\"\n  },\n  \"network_mode\": \"limited\",\n  \"secret_name\": \"example\",\n  \"secret_ref\": \"example\",\n  \"secret_value\": \"example\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.recursion.labelbox.com/managed-agents/v1/vaults/{vault_id}/credentials/{credential_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"allowed_hosts\": [\n    \"example\"\n  ],\n  \"display_name\": \"example-name\",\n  \"injection_locations\": [\n    \"headers\"\n  ],\n  \"integration_permission\": \"example\",\n  \"integration_resources\": [\n    \"example\"\n  ],\n  \"labelbox_scope\": {\n    \"mode\": \"projects\",\n    \"project_ids\": [\n      \"project-id\"\n    ]\n  },\n  \"metadata\": {\n    \"key\": \"example\"\n  },\n  \"network_mode\": \"limited\",\n  \"secret_name\": \"example\",\n  \"secret_ref\": \"example\",\n  \"secret_value\": \"example\"\n}"

response = http.request(request)
puts response.read_body

{
  "allowed_hosts": [
    "example"
  ],
  "created_at": "2026-02-18T09:30:00.000Z",
  "credential_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "credential_type": "example",
  "display_name": "example-name",
  "injection_locations": [
    "example"
  ],
  "integration_connection_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "integration_permission": "example",
  "integration_resources": [
    "example"
  ],
  "labelbox_scope": {
    "mode": "projects",
    "organization_id": "organization-id",
    "project_ids": [
      "project-id"
    ]
  },
  "mcp_server_url": "https://example.com",
  "metadata": {
    "key": "example"
  },
  "network_mode": "limited",
  "organization_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d",
  "platform_mcp_service": "slack_tools",
  "secret_name": "example",
  "secret_ref": "example",
  "updated_at": "2026-02-18T09:30:00.000Z",
  "vault_id": "9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d"
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "forbidden",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "unsupported_media_type",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "bad_gateway",
  "message": "<string>",
  "details": {}
}

{
  "code": "analytics",
  "message": "<string>",
  "details": {}
}

{
  "code": "gateway_timeout",
  "message": "<string>",
  "details": {}
}

Authorizations

Authorization

string

header

required

A Recursion API key, created in the console under API keys.

Path Parameters

vault_id

string<uuid>

required

Vault id (UUID) that owns the credential.

credential_id

string<uuid>

required

Credential reference id (UUID) within the vault, as returned by listVaultCredentials.

Body

application/json

Request body for updating one vault credential. Every field is optional and omitted fields keep their current value; the MCP server URL and an integration connection are deliberately not changeable here.

allowed_hosts

string[]

Replacement host allowlist for limited networking, supporting wildcards such as *.example.com. Sent as a whole list, not merged; omit to keep the current one.

display_name

string

Replacement operator-facing label. Omit to keep the current one.

injection_locations

enum<string>[]

Replacement list of where the credential is applied. Sent as a whole list, not merged; omit to keep the current one.

One place a credential is applied to an outbound request. Headers alone is recommended; a secret in a request body is far easier to log by accident.

Available options:

headers,

body

integration_permission

string

Replacement permission preset for an integration grant. The connection itself is not repointable: that would change which account the agent acts as.

integration_resources

string[]

Replacement resource allowlist for an integration grant.

labelbox_scope

object

Replacement Labelbox scope for a credential to the Labelbox product-state service. Sent as a whole object, not merged; omit to keep the current one. It cannot be cleared: delete and recreate the credential instead.

Show child attributes

Example:

{
  "mode": "projects",
  "project_ids": ["project-id"]
}

metadata

object

Replacement free-form caller-owned JSON. Sent as a whole object, not merged; omit to keep the current value. The key labelbox_scope is reserved for the typed field.

Show child attributes

network_mode

enum<string>

Replacement network mode. limited confines the credential to allowed_hosts; unrestricted removes that confinement. Omit to keep the current one.

Available options:

limited,

unrestricted

secret_name

string

Replacement environment variable or header name the secret binds to inside the sandbox. Omit to keep the current one.

secret_ref

string

New secret-manager reference, for material stored elsewhere. Not supported for webhook_secret. Omit to keep the current secret.

secret_value

string

Replacement credential material. Stored as a new secret version so the previous value stays revocable. Omit to keep the current secret.

Response

One credential in a vault, described without its secret value — no field on this shape can carry secret material, which is what makes it safe to list over the API. Returned when managing a vault's contents; the value itself is opened only inside a running session.

created_at

string<date-time>

required

RFC 3339 timestamp of when this record was created. Server-assigned.

credential_id

string

required

Identifier for this credential (UUID). Server-assigned, and unique only within its vault.

credential_type

string

required

How the credential is used: bearer_token, env_var, or webhook_secret. Legacy rows may report mcp_oauth or integration, so this remains a string rather than a closed response enum.

organization_id

string

required

Organization that owns this record. Resolved from the API key; never accepted from the caller.

updated_at

string<date-time>

required

RFC 3339 timestamp of the last change to this record. Server-assigned.

vault_id

string

required

Vault this credential belongs to (UUID).

allowed_hosts

string[]

Hosts the credential may be sent to when network_mode is limited. Ignored under unrestricted.

display_name

string

Operator-facing label for the credential. Optional: a credential is identifiable by its secret_name or MCP server without one.

injection_locations

string[]

Where the credential is attached to an outbound request: headers, body, or both. Headers alone is recommended; a secret in a request body is far easier to log by accident. Meaningful only for the MCP OAuth and bearer-token kinds: env_var is injected into the sandbox environment, and integration mints its own token per session.

integration_connection_id

string

Organization integration connection this credential grants a session (UUID). Set only for the integration kind, where it replaces sealed material: the provider mints a short-lived token per session.

integration_permission

string

Permission preset applied when a token is minted for this grant; see the provider's scope table. An unknown value is rejected on write rather than at mint time.

integration_resources

string[]

Resources within the connection the grant is narrowed to — repositories, for GitHub. Empty means every resource the connection itself can reach, which is broader than most grants should be.

labelbox_scope

object

Labelbox product-state authorization ceiling: either exact projects or organization-wide access, optionally restricted to one exact Slack audience with an explicit internal or Slack Connect classification. Required for a bearer_token credential whose mcp_server_url is that service; rejected for any other server. Replaced as a whole on update and kept when omitted.

Show child attributes

Example:

{
  "mode": "projects",
  "organization_id": "organization-id",
  "project_ids": ["project-id"]
}

mcp_server_url

string

MCP server this credential may be sent to. Required for bearer_token and immutable afterwards, so a stored secret cannot be repointed at a different service.

metadata

object

Free-form caller-supplied key/value labels. Stored verbatim and never interpreted by the service. The key labelbox_scope is reserved for the typed field of that name.

Show child attributes

network_mode

enum<string>

How far the credential may travel: limited confines it to allowed_hosts, unrestricted permits any host. limited is the safe default.

Available options:

limited,

unrestricted

platform_mcp_service

enum<string>

Deployment-derived identity of the exact platform MCP service this credential targets. Present as slack_tools only when mcp_server_url matches the configured Slack tools endpoint; never caller-controlled or stored.

Available options:

slack_tools

secret_name

string

Environment variable or header name the secret binds to inside the sandbox. Required for the env_var kind.

secret_ref

string

Pointer to material stored in an external secret manager, carrying a provider prefix such as kms: or vault:. Opaque to this service, and empty on the normal path where the value is sealed into the credential itself.

API reference

Endpoints

Rename a credential, rotate its reference, or change its egress bounds

Authorizations

Path Parameters

Body

Response