Update a credential category

Credentials module

PATCH/credential-categories/{id}credentialCategories.update

A credential category, such as All Access or Artist. Updates the fields sent; omitted fields are unchanged. Requires `If-Match` with the current `ETag`: a stale tag returns 412 and a missing tag returns 428.

Requires the capability credentials.category.write.
OAuth scopes: credentials.
Send If-Match with the ETag you read. A stale tag returns 412; a missing tag returns 428.
Error statuses: 400, 401, 404, 412, 422, 428, 429. Errors are RFC 9457 problem details.

Path and query parameters

credentialCategories.update: Path and query parameters
Field	Type	Required	Description
id	string (uuid)	Yes	Identifier of the credential category.

Request body: CredentialCategoryUpdate

credentialCategories.update: CredentialCategoryUpdate
Field	Type	Required	Description
name	string	No	Category name.Constraints: length 1 to 300
code	string	No	Category code, unique per project.Constraints: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$

{
  "name": "All Access",
  "code": "ALL-ACCESS"
}

Response 200: CredentialCategory

credentialCategories.update: CredentialCategory
Field	Type	Required	Description
id	string (uuid)	Yes	Identifier of the credential category.
org_id	string (uuid)	Yes	Identifier of the owning organization, derived from the parent row and never accepted from the caller.
created_at	string (date-time)	Yes	When the row was created.
created_by	string (uuid) \| null	Yes	Identifier of the person who created the row; null when a seed, platform or system process created it.
updated_at	string (date-time)	Yes	When the row was last updated.
updated_by	string (uuid) \| null	Yes	Identifier of the person who last updated the row; null when a seed, platform or system process updated it.
name	string	Yes	Category name.Constraints: length 1 to 300
project_id	string (uuid)	Yes	Identifier of the project.
code	string	Yes	Category code, unique per project.Constraints: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$

{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "name": "All Access",
  "project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "code": "ALL-ACCESS"
}

Code samples

curl -X PATCH "$XOS_BASE_URL/credential-categories/0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H 'If-Match: W/"etag-from-your-last-read"' \
  -H "Content-Type: application/json" \
  -d '{"name":"All Access","code":"ALL-ACCESS"}'

const { data, etag } = await xos.credentialCategories.update("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f", {
    "name": "All Access",
    "code": "ALL-ACCESS"
  }, { ifMatch: etag });

response = xos.credential_categories.update("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f", {"name": "All Access", "code": "ALL-ACCESS"}, if_match=etag)

xos credential-categories update 0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f --data '{"name":"All Access","code":"ALL-ACCESS"}' --if-match auto