---
title: "Update a client secret"
method: PATCH
path: "/v1/auth-servers/{authServerId}/clients/{clientId}/secrets/{clientSecretId}"
tags: ["Auth Server Clients"]
---

# Update a client secret

`PATCH /v1/auth-servers/{authServerId}/clients/{clientId}/secrets/{clientSecretId}`

Update a client secret for a given client, such as enabling or disabling the secret.

## Request body

- UpdateSecretPayload
  - `enabled` boolean — Specifies whether the secret is enabled. If the secret is not enabled, it will not be usable during authentication phase.

## Response `200`

A Client Secret item

- ClientSecretItem — The client secret. The secret value is only returned when creating a new secret item.
  - `id` string, uuid, required — The ID of the client secret
  - `enabled` boolean, required — Specifies whether the secret is enabled. If the secret is not enabled, it will not be usable during authentication phase.
  - `secret` string — The OAuth 2.0 client secret
  - `created_at` string, date-time, required — An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required — An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400` — Bad Request
- `404` — Not Found

---

[API](https://skmtc.net/kong/apis/konnect-api.md) · [All operations](https://skmtc.net/kong/apis/konnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kong/konnect-api/revisions/06734a9c491f/schema)