Sign in
latestOpenAPI 3.0.32026-08-227451,2751.8 MB

d0fc0114da66

Organization

Update the workspace credential policy, available only to workspace owners

Update the workspace's credential policy. When require_cloud_only_credentials is true, credentials created in this workspace must be cloud credentials, and a create that does not ask for one is rejected. The policy is deliberately owner-managed rather than left to whoever creates the credential, and it applies to every caller including API keys. It governs creation only: credentials that already exist are neither converted nor made read-only.

put/organizations/{id}/credentialPolicy

Path parameters

idstring required

Organization id

Request body

require_cloud_only_credentialsboolean

Whether new credentials must be created as cloud credentials

Response

The updated organization

idstring

The ID of the organization

cloud_safe_idstring

Cloud safe ID representation (e.g. GCP and Kubernetes safe)

created_timeinteger

Time at which the organization was created

created_by_idstring

The ID of the user who created this organization

resource_bucket_namestring

Input/output artifact bucket. Null if not yet created.

last_updated_timeinteger

Time at which the organization was last updated

last_updated_by_idstring

The ID of the user who last updated this organization

namestring

The display name of the organization

account_idstring

The id of the account this organization is in

onboardedboolean

flag indicating whether the organization has gone through onboarding

allocated_test_runsinteger

Legacy billing accounts only -- The number of test runs allocated to this workspace

allocated_api_runsinteger

Legacy billing accounts only -- The number of API test runs allocated to this workspace

allocated_a11y_runsinteger

Legacy billing accounts only -- The number of a11y step runs allocated to this workspace

labs_featuresstring[]

Set of labs features activated for this workspace

excluded_featuresstring[]

Set of features to exclude from this workspace, overriding account-level grants. When a feature appears here, authorization checks against this workspace will deny it even if the parent account has the feature enabled. Admin-only field.

execution_runner_size'x1' | 'x2' | 'x3' | 'x4' | 'x5' | 'x6' | 'small' | 'medium' | 'large' | 'inherit'

available runner sizes

generated_artifact_localestring

The workspace's locale used to create new artifacts (e.g. test failure summaries, element descriptions). Default is 'en'.

test_recovery_agent_mode'off' | 'fail_at_end' | 'pass' | 'inherit'

Test Recovery Agent mode. Use inherit (plan-level only) to defer to the workspace-level default.

auto_assign_failure_reason_enabledboolean

When true, agent-generated failure analysis assigns its suggested failure reason to the test run automatically. When false, the suggested failure reason is still persisted but is not assigned. New workspaces enable this by default. Manual assignments always take precedence.

require_agent_edits_on_branchesboolean

When true, agents must save new tests and edits to a branch rather than the main branch. Owner-editable; behind the agentic_test_editing feature flag.

recovery_agent_auto_editsboolean

When true, the recovery agent automatically kicks off test edits when it identifies a fix. Owner-editable; behind the agentic_test_editing feature flag.

require_cloud_only_credentialsboolean

When true, credentials created in this workspace must be cloud credentials, whose secrets can never be read back. Enforced on create for every caller, including API keys, rather than left to whoever creates the credential. Existing non-cloud credentials are unaffected and stay editable. Owner-editable.

effective_credit_allocationinteger

Computed effective credit allocation for this workspace. Equals allocations.credits if explicitly set, otherwise the workspace's equal share of remaining account credits.