---
title: "Site Scan Credentials"
method: PUT
path: "/api/3/sites/{id}/site_credentials"
tags: ["Site"]
---

# Site Scan Credentials

`PUT /api/3/sites/{id}/site_credentials`

Updates multiple site credentials.

## Path parameters

- `id` integer, required — The identifier of the site.

## Request body

- SiteCredential[] — A list of site credentials resources.
  - `account` SharedCredentialAccount, required — Specify the type of service to authenticate as well as all of the information required by that service.
    - `service` 'as400' | 'cifs' | 'cifshash' | 'cvs' | 'db2' | 'ftp' | 'http' | 'ms-sql' | 'mysql' | 'notes' | 'oracle' | 'oracle-service-name' | 'pop' | 'postgresql' | 'remote-exec' | 'snmp' | 'snmpv3' | 'ssh' | 'ssh-key' | 'sybase' | 'telnet' | 'kerberos' | 'hana' | 'scan-assistant' | 'vmware' — The type of service to authenticate with. The following are the names of the valid values for service: | Value | Service | | ------------- | ----------------------------------------------- | | `as400` | IBM AS/400 | | `cifs` | Microsoft Windows/Samba (SMB/CIFS) | | `cifshash` | Microsoft Windows/Samba LM/NTLM Hash (SMB/CIFS) | | `cvs` | Concurrent Versioning System (CVS) | | `db2` | DB2 | | `ftp` | File Transfer Protocol (FTP) | | `http` | Web Site HTTP Authentication | | `ms-sql` | Microsoft SQL Server | | `mysql` | MySQL Server | | `notes` | Lotus Notes/Domino | | `oracle` | Oracle | | `oracle-service-name` | Oracle Service Name | | `pop` | Post Office Protocol (POP) | | `postgresql` | PostgreSQL | | `remote-exec` | Remote Execution | | `snmp` | Simple Network Management Protocol v1/v2c | | `snmpv3` | Simple Network Management Protocol v3 | | `ssh` | Secure Shell (SSH) | | `ssh-key` | Secure Shell (SSH) Public Key | | `sybase` | Sybase SQL Server | | `telnet` | Telnet | | `kerberos` | Kerberos | | `hana` | SAP HANA | | `scanassistant` | Scan Assistant | | `vmware` | VMware |
  - `description` string — The description of the credential.
  - `enabled` boolean — Whether this credential is enabled
  - `hostRestriction` string — The host name or IP address that you want to restrict the credentials to.
  - `id` integer — The identifier of the credential.
  - `name` string, required — The name of the credential.
  - `portRestriction` integer — Further restricts the credential to attempt to authenticate on a specific port.

## Response `200`

OK

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `404` — Not Found
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.net/rapid7/apis/rapid7-vm-api.md) · [All operations](https://skmtc.net/rapid7/apis/rapid7-vm-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/rapid7/rapid7-vm-api/versions/3a8197c22d71/schema)