---
title: "Update App or Organization Scan Configuration"
method: POST
path: "/api/v1/configuration/{orgId}/update"
tags: ["Scan Configuration"]
---

# Update App or Organization Scan Configuration

`POST /api/v1/configuration/{orgId}/update`

Creates or updates an organization scan configuration for this organization.


> 🧾 Audited
> This is recorded as `ORGANIZATION_CONFIGURATION_MODIFIED` [User Activity](https://apidocs.stackhawk.com/reference/listauditactivity#user-activity-types).


> Requires `write:scan_config` permission.

## Path parameters

- `orgId` string, uuid, required

## Request body

- ConfigurationUpsertScanConfigurationRequest — Request to update an organization scan configuration
  - `conf` string — The HawkScan YAML configuration to save for this organization.
  - `configType` 'ORG' | 'APP' | 'TARGET' — Whether the app is tied to a single application or shared by an organization.
  - `name` string — The name of this saved scan configuration. The name should match the conf appId if the configuration is saved for an organization's application.

## Response `200`

OK

## Other responses

- `400` — Bad Request
- `401` — Unauthorized

---

[API](https://skmtc.net/stackhawk/apis/stackhawk-public-api.md) · [All operations](https://skmtc.net/stackhawk/apis/stackhawk-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stackhawk/stackhawk-public-api/versions/ad3dfd54cb63/schema)