> ## Documentation Index
> Fetch the complete documentation index at: https://docs.revoengine.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update an application or the Default CORS policy using its current version.

> Update an application or the Default CORS policy using its current version. The request is scoped to the authenticated instance and enforces Endpoint management roles, current versions and Default Application protection.



## OpenAPI

````yaml /api-reference/openapi.json put /api/v1/services/{serviceId}
openapi: 3.0.0
info:
  title: RevoEngine Platform API
  description: Official RevoEngine Platform API documentation.
  version: 1.9.2
  contact:
    name: Support
    email: support@revoengine.com
  termsOfService: https://docs.revoengine.com/tos
servers:
  - url: https://api.revoengine.com
    description: Production
security: []
tags:
  - name: Accounts
    description: Users, service accounts, API keys, status, and platform access.
    externalDocs:
      description: Identity and access guide
      url: https://docs.revoengine.com/operate/identity-and-access
  - name: Activity
    description: Snapshot-backed activity and version history.
    externalDocs:
      description: Observability guide
      url: https://docs.revoengine.com/operate/observability
  - name: Agent Memory
    description: Administrative access to durable Agent memory.
    externalDocs:
      description: Agent memory and workspaces guide
      url: https://docs.revoengine.com/ai/memory-and-workspaces
  - name: Agent Plugins
    description: Agent plugin definitions, synchronization, testing, and lifecycle.
    externalDocs:
      description: Agent plugins guide
      url: https://docs.revoengine.com/ai/plugins
  - name: Agent Terminals
    description: Terminal pairing, owner grants, access, and command activity.
    externalDocs:
      description: Connect a terminal guide
      url: https://docs.revoengine.com/ai/terminals
  - name: Agents
    description: >-
      Agent definitions, runs, sessions, inboxes, memory, tools, workspaces, and
      lifecycle.
    externalDocs:
      description: Autonomous Agents guide
      url: https://docs.revoengine.com/ai/agents
  - name: Applications
    description: >-
      Application route namespaces, assigned Endpoints and browser-origin
      policies.
    externalDocs:
      description: Applications and CORS
      url: https://docs.revoengine.com/operate/endpoint-applications
  - name: Assistant
    description: >-
      Assistant threads, messages, responses, goals, reports, sharing,
      attachments, and control.
    externalDocs:
      description: Assistant guide
      url: https://docs.revoengine.com/ai/assistant
  - name: Automation
    description: >-
      Jobs, templates, schedules, events, webhooks, execution history, and
      lifecycle.
    externalDocs:
      description: Automation guide
      url: https://docs.revoengine.com/operate/automation
  - name: Browser Profiles
    description: >-
      Manage browser profile metadata, access, assignments and active sessions
      without exposing website authentication state.
    externalDocs:
      description: Browser profiles and collaboration guide
      url: https://docs.revoengine.com/ai/browser
  - name: Chat
    description: Collaborative chat threads, messages, reactions, uploads, and attachments.
    externalDocs:
      description: Team Chat guide
      url: https://docs.revoengine.com/operate/chat
  - name: Component deployments
    description: >-
      Custom Node.js runtime deployment attempts, readiness, activation, and
      rollback.
    externalDocs:
      description: Custom Node.js guide
      url: https://docs.revoengine.com/build/custom-nodejs
  - name: Components
    description: Components, elements, versions, validation, activation, and lifecycle.
    externalDocs:
      description: Components guide
      url: https://docs.revoengine.com/build/components
  - name: Config
    description: Instance configuration, usage, logs, and cache administration.
    externalDocs:
      description: Instance settings guide
      url: https://docs.revoengine.com/platform/instance-settings
  - name: Database Cache
    description: Instance Database cache values and statistics.
    externalDocs:
      description: Database Cache guide
      url: https://docs.revoengine.com/operate/database-cache
  - name: Database Views
    description: Database Views, previews, refreshes, exports, and controlled data actions.
    externalDocs:
      description: Database Views guide
      url: https://docs.revoengine.com/operate/database-views
  - name: Databases
    description: Database definitions, data, audits, exports, cloning, and lifecycle.
    externalDocs:
      description: Databases guide
      url: https://docs.revoengine.com/operate/databases
  - name: Endpoints
    description: >-
      Endpoint definitions, activation, validation, generated OpenAPI, and
      statistics.
    externalDocs:
      description: Endpoints guide
      url: https://docs.revoengine.com/operate/endpoints
  - name: Groups
    description: Groups, membership, avatars, and lifecycle.
    externalDocs:
      description: Groups guide
      url: https://docs.revoengine.com/operate/groups
  - name: Instance Vault
    description: Operations in the Instance Vault Platform API domain.
    externalDocs:
      description: Secrets and Vault guide
      url: https://docs.revoengine.com/operate/secrets
  - name: Me
    description: Current user profile, keys, avatar, and session information.
    externalDocs:
      description: Authentication guide
      url: https://docs.revoengine.com/developers/authentication
  - name: Native tests
    description: Operations in the Native tests Platform API domain.
    externalDocs:
      description: Native tests guide
      url: https://docs.revoengine.com/build/native-tests
  - name: Observability
    description: Authorized execution, performance, graph, and log evidence.
    externalDocs:
      description: Observability guide
      url: https://docs.revoengine.com/operate/observability
  - name: Preferences
    description: User and instance preference values.
    externalDocs:
      description: Platform UI guide
      url: https://docs.revoengine.com/platform/ui-tour
  - name: Role Groups
    description: Role groups, members, assigned roles, and lifecycle.
    externalDocs:
      description: Permissions guide
      url: https://docs.revoengine.com/operate/permissions
  - name: Roles
    description: Available platform roles and role details.
    externalDocs:
      description: Permissions guide
      url: https://docs.revoengine.com/operate/permissions
  - name: Search
    description: Cross-domain search over objects visible to the caller.
    externalDocs:
      description: Search and discovery guide
      url: https://docs.revoengine.com/platform/search
  - name: Secrets
    description: >-
      Secret definitions, revision history, explicit rotation, activation,
      reveal, disable, and destruction.
    externalDocs:
      description: Secrets guide
      url: https://docs.revoengine.com/operate/secrets
  - name: Share
    description: >-
      Short-lived authenticated links to supported application routes and grid
      state.
    externalDocs:
      description: Platform API share-link guide
      url: >-
        https://docs.revoengine.com/developers/platform-api#share-application-context
  - name: Storage
    description: >-
      Storage workspaces, folders, objects, upload sessions, signed access, and
      lifecycle.
    externalDocs:
      description: Storage guide
      url: https://docs.revoengine.com/operate/storage
  - name: Studio
    description: >-
      Manage durable Studio coding sessions, participants, shared discussion,
      tests, review and explicitly activated releases. Available only on enabled
      instances.
    externalDocs:
      description: Studio sessions guide
      url: https://docs.revoengine.com/build/studio-sessions
externalDocs:
  description: Documentation
  url: https://docs.revoengine.com
paths:
  /api/v1/services/{serviceId}:
    put:
      tags:
        - Applications
      summary: >-
        Update an application or the Default CORS policy using its current
        version.
      description: >-
        Update an application or the Default CORS policy using its current
        version. The request is scoped to the authenticated instance and
        enforces Endpoint management roles, current versions and Default
        Application protection.
      operationId: EndpointServiceRegistryController_update
      parameters:
        - name: serviceId
          required: true
          in: path
          schema:
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateEndpointServiceDto'
      responses:
        '200':
          description: ''
      security:
        - bearer: []
components:
  schemas:
    UpdateEndpointServiceDto:
      type: object
      properties:
        invocationPolicy:
          nullable: true
          description: >-
            Additional caller ACL. Omit to preserve; null restores legacy
            instance-wide invocation.
          type: object
          allOf:
            - $ref: '#/components/schemas/ApplicationInvocationPolicyDto'
        anonymousAccess:
          nullable: true
          description: >-
            Anonymous gate and distributed limits. Omit to preserve; null
            disables anonymous admission.
          type: object
          allOf:
            - $ref: '#/components/schemas/ApplicationAnonymousAccessDto'
        version:
          type: number
          minimum: 0
        name:
          type: string
          maxLength: 100
        description:
          type: string
          maxLength: 2000
          nullable: true
        cors:
          $ref: '#/components/schemas/EndpointApplicationCorsDto'
      required:
        - version
    ApplicationInvocationPolicyDto:
      type: object
      properties:
        mode:
          type: string
          enum:
            - all
            - allowlist
            - denylist
          description: >-
            Additional caller restriction; ENDPOINT_INVOKE remains required. all
            requires empty lists.
        users:
          maxItems: 500
          description: >-
            Active local human-user UUIDs; never execution accounts or external
            email identities.
          type: array
          items:
            type: string
        serviceAccounts:
          maxItems: 500
          description: >-
            Active local service-account UUIDs. Management access to each
            account is required.
          type: array
          items:
            type: string
        groups:
          maxItems: 500
          description: >-
            Live local Group UUIDs. Omission preserves existing groups on
            update; explicit [] clears them.
          type: array
          items:
            type: string
      required:
        - mode
        - users
        - serviceAccounts
    ApplicationAnonymousAccessDto:
      type: object
      properties:
        enabled:
          type: boolean
          description: Application gate only; each Endpoint must also explicitly opt in.
        requestsPerMinute:
          type: number
          minimum: 1
          maximum: 1000
          description: Distributed sliding-minute limit per Application.
        maxConcurrent:
          type: number
          minimum: 1
          maximum: 10
          description: Distributed active invocation limit per Application.
      required:
        - enabled
        - requestsPerMinute
        - maxConcurrent
    EndpointApplicationCorsDto:
      type: object
      properties:
        mode:
          type: string
          enum:
            - public
            - allowlist
            - disabled
        allowedOrigins:
          maxItems: 100
          example:
            - https://portal.example.com
          description: >-
            Exact canonical HTTP(S) origins. Must be empty outside allowlist
            mode.
          type: array
          items:
            type: string
      required:
        - mode
        - allowedOrigins
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: JWT
      description: Bearer JWT token or API Key (sk-*).
      type: http

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.