Update connector access policy. PATCH /api/openapi/v1/connector-access-policy, scope admin.v1.connectors.manage.
- Scope: admin.v1.connectors.manage
- Permission: Manage connectors (connectors)
- Permission type: Manage
- Endpoint: PATCH/api/openapi/v1/connector-access-policy
Authentication and request headers
Call with an application API key. This endpoint checks only the scope above; read, manage and execute permissions do not imply one another.
| Name | Location | Type | Required | Description | Example |
|---|---|---|---|---|---|
| Authorization | header | string | Yes | Application API key, passed as a Bearer token. | Bearer qwk_*** |
| X-Request-Id | header | string | No | Optional request tracing identifier; generated by the server if omitted. | req-20260831-001 |
Request parameters
| Name | Location | Type | Required | Description | Example |
|---|---|---|---|---|---|
| expected_revision | body | integer · int64 | Required | Expected revision for concurrent update checks | 0 |
| mode | body | string | Required | Access control mode | "allow-all" |
| rules | body | array ｜ null | Required | At most 50 non-deleted rules per organization, including disabled rules. Exceeding it returns 409 connector_execution_rule_limit_exceeded. | [{"enabled":false,"expression":"<string>","match_object":"endpoint-url","rule_id":"<uuid>"}] |
Request example
cURL
Responses
200 OK
| Name | Type | Required | Description | Example |
|---|---|---|---|---|
| mode | string | Yes | Access control mode | "allow-all" |
| revision | integer · int64 | Yes | Revision used for concurrent update checks | 0 |
| rules | array<OpenapifacadeConnectorAccessPolicyRule> | Yes | Rules | [{"enabled":false,"expression":"<string>","match_object":"endpoint-url","rule_id":"<uuid>"}] |
| rules[].enabled | boolean | Yes | Enabled | false |
| rules[].expression | string | Yes | Match expression | "<string>" |
| rules[].match_object | string | Yes | Match target | "endpoint-url" |
| rules[].rule_id | string · uuid | Yes | Rule ID | "<uuid>" |
| updated_at | string · date-time | Yes | Updated at | "2026-08-27T10:00:00Z" |
default Flat business error
| Name | Type | Required | Description | Example |
|---|---|---|---|---|
| code | string | No | Stable business error code | "<string>" |
| detail | string | Yes | Human-readable error description | "<string>" |
| details | OpenapiErrorDetails | No | Error details | {"field":"<string>","reason":"<string>","suggestion":"<string>"} |
| details.field | string | No | Request field that failed validation | "<string>" |
| details.reason | string | No | Stable validation failure reason | "<string>" |
| details.suggestion | string | No | Suggested normalized value | "<string>" |
| error | string | Yes | Stable HTTP error type | "<string>" |