Update access profile (deprecated path)

Partial update. Omitted fields preserve the current value. rate_limit: null explicitly clears the existing rate limit. Size limits enforced: max 100 provider_configs, max 100 budgets, max 50 tags.

PUT /api/access-profiles/{profile_id}

Error

A valid request URL is required to generate request examples

200

{
  "access_profile": {
    "id": 123,
    "name": "<string>",
    "description": "<string>",
    "is_active": true,
    "version": 123,
    "tags": [
      "<string>"
    ],
    "provider_configs": [
      {
        "provider_name": "<string>",
        "id": 123,
        "all_models_allowed": true,
        "allowed_models": [
          "<string>"
        ],
        "budgets": [
          {
            "max_limit": 123,
            "reset_duration": "1h",
            "id": "<string>",
            "reset_config": {
              "quarter_start_month": 6
            },
            "scope": "<string>",
            "current_usage": 123,
            "last_reset": "2023-11-07T05:31:56Z"
          }
        ],
        "rate_limit": {
          "id": "<string>",
          "token_max_limit": 123,
          "token_reset_duration": "1h",
          "request_max_limit": 123,
          "request_reset_duration": "1h",
          "token_current_usage": 123,
          "request_current_usage": 123
        }
      }
    ],
    "budgets": [
      {
        "max_limit": 123,
        "reset_duration": "1h",
        "id": "<string>",
        "reset_config": {
          "quarter_start_month": 6
        },
        "scope": "<string>",
        "current_usage": 123,
        "last_reset": "2023-11-07T05:31:56Z"
      }
    ],
    "rate_limit": {
      "id": "<string>",
      "token_max_limit": 123,
      "token_reset_duration": "1h",
      "request_max_limit": 123,
      "request_reset_duration": "1h",
      "token_current_usage": 123,
      "request_current_usage": 123
    },
    "calendar_aligned": true,
    "allow_all_providers": true,
    "auto_rotation_interval": 123,
    "next_rotation_at": "2023-11-07T05:31:56Z",
    "last_rotation_at": "2023-11-07T05:31:56Z",
    "mcp_tool_groups": [
      {
        "tool_group_id": 123
      }
    ],
    "mcp_servers": [
      {
        "mcp_server_id": "<string>"
      }
    ],
    "mcp_tool_overrides": [
      {
        "mcp_client_id": "<string>",
        "tool_name": "<string>",
        "action": "include"
      }
    ],
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z"
  }
}

This path is deprecated and will be removed in the following major release. Use /api/governance/access-profiles/{profile_id} instead.

This endpoint is available in Bifrost Enterprise only.

Authorizations

ManagementBearerAuthBasicAuth

Authorization · string · header · required

Management API authentication for /api/* endpoints. Use the Authorization header with Bearer <token>, where <token> is one of:

• a Bifrost management API key,
• a dashboard session token issued by POST /api/session/login,
• base64 of <admin-username>:<admin-password> (legacy equivalent of BasicAuth).

Virtual keys (sk-bf-*) and the x-api-key header are not accepted on management APIs - the sole exception is GET /api/governance/virtual-keys/quota, which is virtual-key-only.

Path Parameters

profile_id · integer · required

Body

application/json

Partial update. Omitted fields preserve the current value. rate_limit: null explicitly clears the existing rate limit; omitting the field preserves it. Update enforces size limits not enforced on create: max 100 provider_configs, max 100 budgets, max 50 tags.

name · string

Maximum string length: 255

description · string | null

tags · string[]

provider_configs · object[]

Show child attributes

budgets · object[]

Show child attributes

rate_limit · object | null

Show child attributes

calendar_aligned · boolean | null

allow_all_providers · boolean | null

When true, grants access to every provider, including ones without a provider_configs entry and providers added later. A listed provider keeps its own model allow/blacklist, budgets, rate limits, and key selection; an unlisted provider gets all models, all keys, and no per-provider limits. When false, provider-wide access is disabled and access is deny-by-default via provider_configs. Omit to leave unchanged.

auto_rotation_interval · Option 1 · string Option 2 · integer<int64> Option 3 · integer<int64>

Replace the rotation schedule ("30d", "12h" or nanoseconds); "" or 0 turns it off. Omit to leave the schedule unchanged.

Pattern: ^$|^[0-9]+d$|^([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$

Example:

"30d"

next_rotation_at · string<date-time> | null

Override the next rotation time (must be in the future). null clears it, which is only valid when the interval is off. Omit to keep the existing schedule; a changed interval re-anchors it to now + interval.

mcp_tool_groups · object[]

Show child attributes

mcp_servers · object[]

Show child attributes

mcp_tool_overrides · object[]

Show child attributes

Response

200

application/json

Profile updated

access_profile · object

Show child attributes