Edit agent governance metadata without making the agent callable unless it remains approved.

PATCH

/v1/agents/{agent_id}

Authorizations

• oidc

Parameters

Path Parameters

agent_id

required

string

Query Parameters

tenant_id

string

environment_id

string

Request Body ^required

Accepts the snake_case admin shape below and the legacy Agent manifest shape from ../jsonschema/agent.schema.json.

object

tenant_id

string

>= 1 characters

environment_id

string

>= 1 characters

agent_id

string

>= 1 characters

name

string

>= 1 characters

purpose

string

owner

object

team

required

string

>= 1 characters

escalation_contact

required

string

>= 1 characters

owner_team

string

>= 1 characters

escalation_contact

string

>= 1 characters

allowed_surfaces

Array<string>

>= 1 items

allowed_environments

Array<string>

>= 1 items

delegation_mode

string

Allowed values: autonomous human_delegated mixed

credential_mode

string

Allowed values: none service_account user_delegated agent_scoped workload_mapped

instance_identity

object

required

required

boolean

allowed_instance_ids

required

Array<string>

allowed_instance_id_prefixes

required

Array<string>

key

additional properties

any

Responses

202

Agent edit accepted and audited.

object

schema_version

required

accepted

required

boolean

agent

required

object

schema_version

required

agent_id

required

string

>= 1 characters

name

required

string

>= 1 characters

purpose

string | null

tenant_id

required

string

>= 1 characters

environment_id

required

string

>= 1 characters

lifecycle_state

required

Allowed values: pending_approval approved disabled deprecated

approval_status

required

string

Allowed values: submitted under_review approved rejected disabled archived

owner

required

object

team

required

string

>= 1 characters

escalation_contact

required

string

>= 1 characters

allowed_surfaces

required

Array<string>

>= 1 items

allowed_environments

required

Array<string>

>= 1 items

delegation_mode

required

string

Allowed values: autonomous human_delegated mixed

credential_mode

required

string

Allowed values: none service_account user_delegated agent_scoped workload_mapped

instance_identity

required

object

required

required

boolean

allowed_instance_ids

required

Array<string>

allowed_instance_id_prefixes

required

Array<string>

submitted_by

required

string

>= 1 characters

submitted_at

required

string format: date-time

reviewed_by

string | null

reviewed_at

string | null format: date-time

review_reason_code

string | null

/^[a-z0-9_]+$/

review_reason

string | null

disabled_at

string | null format: date-time

archived_at

string | null format: date-time

revoked_at

string | null format: date-time

revocation_id

string | null

created_at

required

string format: date-time

updated_at

required

string format: date-time

permissions

required

object

resource_type

required

Allowed values: mcp_server agent credential_binding client_session

resource_id

required

string

>= 1 characters

allowed_actions

required

Array

Allowed values: mcp_server.read mcp_server.register mcp_server.submit_revision mcp_server.resubmit mcp_server.edit_owner mcp_server.validate_manifest mcp_server.reprobe mcp_server.approve_submission mcp_server.reject_submission mcp_server.disable mcp_server.deprecate mcp_server.archive mcp_server.compare_versions agent.read agent.submit agent.edit agent.approve agent.reject agent.disable agent.archive agent.revoke api_source.read api_source.import api_source.review api_source.approve api_source.reject api_source.disable api_source.archive credential_binding.read credential_binding.create credential_binding.update credential_binding.rotate credential_binding.disable credential_binding.revoke credential_binding.approve credential_binding.audit_read identity_provider.read identity_provider.diagnose role_binding.read role_binding.manage local_identity.read local_identity.manage reason_code.read reason_code.manage approval_queue.read approval_queue.batch_approve

audit_event_ids

required

Array<string>

revocation_id

required

string | null

affected_client_session_ids

required

Array<string>