---
title: "Tune configuration parameters for a given auth path."
method: POST
path: "/sys/auth/{path}/tune"
tags: ["system"]
---

# Tune configuration parameters for a given auth path.

`POST /sys/auth/{path}/tune`

This endpoint requires sudo capability on the final path, but the same functionality can be achieved without sudo via `sys/mounts/auth/[auth-path]/tune`.

## Request body

- SystemAuthTuneRequest
  - `allowed_response_headers` string[] — A list of headers to whitelist and allow a plugin to set on responses.
  - `audit_non_hmac_request_keys` string[] — The list of keys in the request data object that will not be HMAC'ed by audit devices.
  - `audit_non_hmac_response_keys` string[] — The list of keys in the response data object that will not be HMAC'ed by audit devices.
  - `default_lease_ttl` string — The default lease TTL for this mount.
  - `description` string — User-friendly description for this credential backend.
  - `listing_visibility` string — Determines the visibility of the mount in the UI-specific listing endpoint. Accepted value are 'unauth' and 'hidden', with the empty default ('') behaving like 'hidden'.
  - `max_lease_ttl` string — The max lease TTL for this mount.
  - `options` object — The options to pass into the backend. Should be a json object with string keys and values.
  - `passthrough_request_headers` string[] — A list of headers to whitelist and pass from the request to the plugin.
  - `plugin_version` string — The semantic version of the plugin to use.
  - `token_type` string — The type of token to issue (service or batch).

## Response `200`

OK

---

[API](https://skmtc.net/lensesio/apis/hashicorp-vault-api.md) · [All operations](https://skmtc.net/lensesio/apis/hashicorp-vault-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lensesio/hashicorp-vault-api/versions/bd8194de0697/schema)