---
title: "Update"
method: POST
path: "/api/v1/settings/session"
tags: ["Session Settings"]
---

# Update

`POST /api/v1/settings/session`

Update modifies the session security settings for the tenant, such as session length and IP allowlists.

## Request body

- C1ApiSettingsV1UpdateSessionSettingsRequest — The UpdateSessionSettingsRequest message.
  - `sessionSettings` C1ApiSettingsV1SessionSettings — SessionSettings configures session security for the tenant, including timeouts and per-role IP restrictions.
    - `clientIdApprovalRequestPolicyId` string — Policy ID for REQUESTABLE mode approval routing.
    - `clientIdMetadataDocumentPolicy` 'CLIENT_ID_METADATA_DOCUMENT_POLICY_UNSPECIFIED' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOW_ALL' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_REQUESTABLE' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOWLIST_ONLY' — Policy for metadata document client_id URLs.
    - `connectorSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientsEnabled` boolean — Enable external client registration (OAuth 2.0 DCR) for MCP clients like Claude Desktop, Cursor, and other AI assistants.
    - `maxSessionLength` string, duration
    - `pccAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `pccUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
  - `updateMask` string, nullable

## Response `200`

Successful response

- C1ApiSettingsV1UpdateSessionSettingsResponse — The UpdateSessionSettingsResponse message.
  - `sessionSettings` C1ApiSettingsV1SessionSettings — SessionSettings configures session security for the tenant, including timeouts and per-role IP restrictions.
    - `clientIdApprovalRequestPolicyId` string — Policy ID for REQUESTABLE mode approval routing.
    - `clientIdMetadataDocumentPolicy` 'CLIENT_ID_METADATA_DOCUMENT_POLICY_UNSPECIFIED' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOW_ALL' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_REQUESTABLE' | 'CLIENT_ID_METADATA_DOCUMENT_POLICY_ALLOWLIST_ONLY' — Policy for metadata document client_id URLs.
    - `connectorSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `externalClientsEnabled` boolean — Enable external client registration (OAuth 2.0 DCR) for MCP clients like Claude Desktop, Cursor, and other AI assistants.
    - `maxSessionLength` string, duration
    - `pccAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `pccUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoAdminSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `ssoUserSource` C1ApiSettingsV1CIDRRestriction — CIDRRestriction defines an IP-based access restriction with an enable toggle and a list of allowed CIDRs.
      - `enabled` boolean — Whether this CIDR restriction is enforced.
      - `sourceCidr` string[], nullable — The list of CIDR ranges that are allowed when the restriction is enabled. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/versions/d391405a35d3/schema)