Update a Provider Configuration

Use this endpoint to update an existing provider configuration. If the configuration payload changes, it is re-validated against the provider’s JSON Schema. A protected provider configuration is written only by a person: an application gets 403 FLK-0365 on create with protected true, update, enable, disable and delete. A change to base_url, auth.config.token_url, auth.config.issuer_url, openapi_schema_id or allowedHosts on a configuration that holds a credential needs every credential value in the same request; otherwise the call answers 422 FLK-0962 and writes nothing.

PATCH /v1/provider-configurations/{id}

Update a Provider Configuration

cURL

curl --request PATCH \
  --url https://flowker.sandbox.lerian.net/v1/provider-configurations/{id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowedHosts": [
    "api.acme.com",
    ".kyc-provider.io"
  ],
  "allowedPrivateHosts": [
    "nginx.pix-inline.internal"
  ],
  "config": {},
  "description": "ClearSale anti-fraud — updated with new API version",
  "metadata": {},
  "name": "ClearSale Production v2",
  "schemaBindings": [
    {
      "schemaId": "018f3e2a-1c4d-7b9e-a1b2-c3d4e5f6a7b8",
      "type": "openapi",
      "operations": [
        {
          "method": "POST",
          "path": "/payments"
        }
      ]
    }
  ]
}
'

200

{
  "id": "c3d4e5f6-a7b8-9012-cdef-345678901234",
  "name": "ClearSale Production",
  "description": "ClearSale anti-fraud for Pix transactions",
  "providerId": "clearsale",
  "kind": "catalog",
  "config": {
    "baseUrl": "https://api.clearsale.com.br",
    "environment": "production"
  },
  "allowedHosts": [
    "api.clearsale.com.br"
  ],
  "schemaBindings": [],
  "status": "active",
  "metadata": {
    "team": "risk"
  },
  "createdAt": "2026-03-17T14:00:00Z",
  "updatedAt": "2026-03-17T14:00:00Z"
}

Autorizaciones

Authorization · string · header · requerido

JWT bearer token issued by the identity provider. Send it in the Authorization header as Bearer <token>.

Parámetros de ruta

id · string<uuid> · requerido

Unique identifier of the provider configuration.

Cuerpo

application/json

Request body containing the updated provider configuration details.

allowedHosts · string[]

Replaces the outbound allow-list. Omit the field to leave the stored list unchanged. Send an empty list to clear it, and a non-empty list to replace it. The new list must satisfy the same rules as on create, including the base-URL coverage check and the generic HTTP provider rule.

Maximum array length: 100

Maximum string length: 253

Ejemplo:

["api.acme.com", ".kyc-provider.io"]

allowedPrivateHosts · string[]

Managed by Lerian. A request from your tenant may only clear this list; a non-empty list answers 422 FLK-0317.

Maximum array length: 100

Maximum string length: 253

Ejemplo:

["nginx.pix-inline.internal"]

config · object

Updated provider-specific configuration.

Show child attributes

description · string

Updated description.

Maximum string length: 500

Ejemplo:

"ClearSale anti-fraud — updated with new API version"

metadata · object

Updated metadata.

Show child attributes

name · string

Updated name.

Required string length: 1 - 100

Ejemplo:

"ClearSale Production v2"

schemaBindings · object[]

Replaces the schema bindings. Omit the field to leave the stored bindings unchanged. Send an empty list to remove them all, and a non-empty list to replace the set. Flowker checks every entry against the stored schemas before it saves anything.

Maximum array length: 100

Show child attributes

Respuesta

200

application/json

Indicates that the request was successful and the response contains the requested data.

config · object · requerido

Provider-specific configuration.

Show child attributes

Ejemplo:

{
  "baseUrl": "https://api.clearsale.com.br",
  "environment": "production"
}

createdAt · string<date-time> · requerido

Timestamp when the configuration was created.

Ejemplo:

"2026-03-17T14:00:00Z"

id · string<uuid> · requerido

Unique identifier of the configuration.

Ejemplo:

"c3d4e5f6-a7b8-9012-cdef-345678901234"

kind · enum<string> · requerido

Connection kind of this configuration: catalog targets a provider published in the catalog, and external_openapi targets an OpenAPI document registered for your tenant.

Opciones disponibles: catalog, external_openapi

Ejemplo:

"catalog"

name · string · requerido

Name of the configuration.

Ejemplo:

"ClearSale Production"

providerId · string · requerido

ID of the catalog provider this configuration targets. A configuration of kind external_openapi created without one carries the reserved id external.openapi instead.

Ejemplo:

"clearsale"

schemaBindings · object[] · requerido

Stored schemas this configuration binds to. The field is always present, and it is an empty list when the configuration binds no schema.

Show child attributes

status · enum<string> · requerido

Current status: active or disabled.

Opciones disponibles: active, disabled

Ejemplo:

"active"

updatedAt · string<date-time> · requerido

Timestamp of the last update.

Ejemplo:

"2026-03-17T14:00:00Z"

protected · boolean · requerido

Whether only a person may change this configuration.

Ejemplo:

false

allowedHosts · string[]

Outbound allow-list of destination hostnames. The field is absent when the configuration declares no allow-list.

Maximum array length: 100

Maximum string length: 253

Ejemplo:

["api.clearsale.com.br"]

allowedPrivateHosts · string[]

Named private hosts this configuration may reach, managed by Lerian. The field is absent when the set is empty.

Maximum array length: 100

Maximum string length: 253

Ejemplo:

["nginx.pix-inline.internal"]

description · string

Human-readable description.

Ejemplo:

"ClearSale anti-fraud for Pix transactions"

metadata · object

Custom metadata.

Show child attributes

Ejemplo:

{
  "environment": "production",
  "team": "risk"
}