Skip to main content
PUT
Error
Required Permissions How permissions work

Authorizations

Authorization
string
header
required

Management API authentication for /api/* endpoints. Use the Authorization header with Bearer <token>, where <token> is one of:

  • a Bifrost management API key,
  • a dashboard session token issued by POST /api/session/login,
  • base64 of <admin-username>:<admin-password> (legacy equivalent of BasicAuth).

Virtual keys (sk-bf-*) and the x-api-key header are not accepted on management APIs - the sole exception is GET /api/governance/virtual-keys/quota, which is virtual-key-only.

Authentication alone is not sufficient in Bifrost Enterprise: each operation page shows a Required Permissions table (Resource:Operation, for example Dashboard:View) above its Authorizations section, and the caller's RBAC role or management API key scopes must include what it lists, otherwise the request is rejected with 403 Forbidden.

A local admin — authenticated with the admin password, or any caller on a deployment with dashboard auth disabled — bypasses these checks and can call every management endpoint. See Required permissions for how permissions are derived and which endpoints are exempt.

Path Parameters

provider_name
string
required

Provider name

Body

application/json

Request to update provider governance settings

budgets
object[] | null

Full desired set of budgets. Pointer-to-slice semantics apply: omitting the field leaves budgets unchanged; sending an empty array [] removes all budgets; sending a non-empty array replaces all existing budgets with the provided set.

budget
object

Deprecated: use budgets.

rate_limit
object

Rate limit configuration

calendar_aligned
boolean | null

When true, all budgets reset at clean calendar boundaries. Omit to leave unchanged.

reset_budget_usage
boolean

When true, zeroes current usage on the budgets reconciled by this update. The reset window is left alone: last_reset only ever advances, and never as a side effect of a configuration write, so the current window keeps its existing start and end.

Response

Provider governance updated successfully

Response containing provider governance settings

provider
string

Provider name

budgets
object[]

Budget configurations for this provider. Each entry has a unique reset_duration.

budget
object

Deprecated: use budgets. Returns the first budget for backward compatibility.

rate_limit
object

Rate limit configuration

calendar_aligned
boolean
default:false

When true, all budgets reset at clean calendar boundaries (midnight UTC for day, Monday for week, 1st for month, Jan 1 for year).