From e85e18e5b961f5a3658ba9d6330af149a47ca4c9 Mon Sep 17 00:00:00 2001 From: mlsmaycon Date: Thu, 27 Aug 2026 08:46:24 +0000 Subject: [PATCH] [management] Document the fourth trigger for the update credential check --- shared/management/http/api/openapi.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/shared/management/http/api/openapi.yml b/shared/management/http/api/openapi.yml index f3807e15e..38b086abb 100644 --- a/shared/management/http/api/openapi.yml +++ b/shared/management/http/api/openapi.yml @@ -14217,7 +14217,7 @@ paths: description: | Update an existing Agent Network AI provider. - When the upstream URL, the API key or the catalog provider changes, the record is checked against the vendor before the change is stored, and a refusal returns 422 without replacing what was there. An update omitting the API key is checked against the stored one. Edits touching none of the three — a rename, model rows, price edits — are stored without a check, as are the cases the create description lists as unverifiable. + When the upstream URL, the API key or the catalog provider changes, the record is checked against the vendor before the change is stored, and a refusal returns 422 without replacing what was there. Switching TLS verification back on is the fourth trigger: a provider exempt from the check was stored unverified, so the edit that ends the exemption is the first opportunity to check it. An update omitting the API key is checked against the stored one. Edits touching none of the four — a rename, model rows, price edits — are stored without a check, as are the cases the create description lists as unverifiable. tags: [ Agent Network ] security: - BearerAuth: [ ]