v50

latestOpenAPI 3.1.0Apache-2.0raw.githubusercontent.com2026-08-01147180956.9 KB
Toolkit Permissions

Replace binding permission rules

Replace the full set of permission rules for a binding (idempotent PUT).

put/toolkits/{toolkit_id}/credentials/{credential_id}/permissions

Path parameters

toolkit_idstring required
credential_idstring required

Request body

effect'allow' | 'deny' required

Whether this rule allows or denies the matched request.

match_mode'regex' | 'prefix' | 'exact'

How path is interpreted: regex (full-match), prefix (string prefix), or exact (equality). Defaults to regex for backwards compatibility.

methodsstring[] nullable

HTTP methods to match (case-insensitive). None matches all.

operationsstring[] nullable

OpenAPI operation IDs to match. None matches all operations.

pathstring nullable

Path pattern to match. Interpreted per match_mode: regex uses full-match semantics (the pattern must describe the whole path); prefix and exact are literal. None matches all paths.

Response

Successful Response