---
title: "POST /usc-update"
method: POST
path: "/usc-update"
tags: ["v2"]
---

# POST /usc-update

`POST /usc-update`

## Request body

- UscUpdate — uscUpdate is a command that updates a secret in a Universal Secrets Connector
  - `binary-value` boolean — Use this option if the universal secrets value is a base64 encoded binary
  - `description` string — Description of the universal secrets
  - `json` boolean — Set output format to JSON
  - `namespace` string — The namespace (relevant for Hashi vault target)
  - `object-type` string
  - `pfx-password` string — Optional, the passphrase that protects the private key within the pfx certificate (Relevant only for Azure KV certificates)
  - `remote-secret-activation-date` string — Activation date for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ
  - `remote-secret-expires` string — Expiration time for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ
  - `secret-id` string, required — The universal secrets id (or name, for AWS, Azure, K8s or Hashi vault targets) to update
  - `selected-repositories` string — GitHub selected repositories (required for GitHub USC when repository-access is 'selected' or for repository scope) Comma-separated repository names (e.g., "repo1,repo2")
  - `tags` object — Tags for the universal secrets
  - `token` string — Authentication token (see `/auth` and `/configure`)
  - `uid-token` string — The universal identity token, Required only for universal_identity authentication
  - `usc-encryption-key` string — Optional, The name of the remote key that used to encrypt the secret value (if empty, the default key will be used)
  - `usc-name` string, required — Name of the Universal Secrets Connector item
  - `value` string, required — Value of the universal secrets item, either text or base64 encoded binary

## Response `200`

uscUpdateResponse wraps response body.

- UscUpdateSecretOutput
  - `name` string
  - `secret_id` string
  - `version_id` string

## Other responses

- `default` — errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.net/akeyless/apis/akeyless-api.md) · [All operations](https://skmtc.net/akeyless/apis/akeyless-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/akeyless/akeyless-api/versions/0ceb25634501/schema)
