Update an agent plugin
Updates a tenant agent plugin and records the normalized plugin definition snapshot.
Authorizations
Bearer JWT token or API Key (sk-*).
Path Parameters
Body
Replacement plugin execution provider kind.
tools, mcp_server, skill, package Updated plugin name.
1Updated plugin description.
Canonical English capability metadata used for tool selection. Operator-facing content may remain localized.
Updated plugin category.
Replacement resource metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use.
Updated upstream plugin identifier.
Optimistic version expected by the client.
x >= 0Replacement execution mode.
sync, background Replacement component id. Required when kind is explicitly set to tools, and forbidden for MCP server patches.
1Replacement fixed component version for tools patches. Forbidden for MCP server patches.
x >= 0Replacement component-backed toolset. Forbidden for MCP server and skill patches.
Replacement remote MCP server configuration. Required when kind is explicitly set to mcp_server, and forbidden for tools patches.
Replacement per-tool MCP governance and loading configuration for MCP server patches. Forbidden for tools patches.
Replacement Markdown skill configuration. Required when kind is explicitly set to skill.
Replacement Markdown package manifest. Required when kind is explicitly set to package.
Replacement provider source recorded for discovery, auditability, and telemetry.
tenant_plugin, community_plugin Replacement strict structured input schema for tools plugins. Forbidden for MCP server patches. Must be an object schema with additionalProperties=false and descriptions on every declared property.
Replacement structured output schema for tools plugins. Forbidden for MCP server patches.
Replacement approval contract.
Declared mutation intent used for governance and approval safety.
read, write, destructive, external Replacement reversibility declaration.
reversible, operator_reversible, irreversible, unknown Replacement target scope.
assistant_thread, agent, tenant, external Replacement side-effect declaration.
Normalized side-effect categories used for governance and operator review.
Replacement execution timeout in milliseconds.
x >= 100030000
Replacement maximum serialized result size in bytes.
x >= 512Whether the plugin should be surfaced as summary-only discovery context for agents and assistant threads before explicit attachment.
Updated active flag used to gate runtime attachment.

