> ## Documentation Index
> Fetch the complete documentation index at: https://docs.photon.codes/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use Stable documentation by default. Honor an explicit Beta request or a URL under /docs/beta/. If the requested version conflicts with the installed CLI package or API origin, clarify the target before writing integration code.
> Pages under /docs/beta/ document Beta; other product pages document Stable. Keep the CLI package, commands, API origin, and credentials within the selected version. State the documentation version in your answer.
> For MCP search, always pass version: Stable or version: Beta. Unfiltered search mixes both versions. For filesystem reads, keep Beta queries under /beta/ and exclude /beta/ from Stable queries; discover paths before reading them.
> The public docs base is https://photon.codes/docs. Convert MCP page paths to public URLs under that base, preserving /beta/ when present. Read https://photon.codes/docs/skill.md for version selection and https://photon.codes/docs/llms.txt for the version indexes.

# Update project API key permissions

> Update project API key permissions: updateProjectApiKey in the TypeScript, Python and Rust clients.

`PATCH /v1/projects/{projectId}/api-keys/{apiKeyId}`

Replaces the identified project key's permission list with the supplied permissions and returns the updated metadata. Sending the permission list the key already has leaves it unchanged. This request does not create a new secret or change the key's project binding. Supply the required Idempotency-Key header.

<Tabs>
  <Tab title="TypeScript">
    ```typescript TypeScript theme={null}
    photon.projects.updateProjectApiKey(input: UpdateProjectApiKeyInput, options?: RequestOptions): Promise<UpdateProjectApiKeyOutput>
    ```
  </Tab>

  <Tab title="Python">
    ```python Python theme={null}
    photon.projects.update_project_api_key(input: UpdateProjectApiKeyInput) -> models.ProjectApiKeyResponse
    ```
  </Tab>

  <Tab title="Rust">
    ```rust Rust theme={null}
    client.update_project_api_key(idempotency_key: String, api_key_id: String, project_id: String, body: &types::UpdateProjectApiKeyRequest).await -> Result<ResponseValue<types::ProjectApiKeyResponse>, Error<UpdateProjectApiKeyError>>
    ```
  </Tab>
</Tabs>

<RequestExample>
  ```typescript TypeScript theme={null}
  import { Photon } from "@photon-ai/api";

  const photon = new Photon({
    headers: { Authorization: `Bearer ${process.env.PHOTON_API_TOKEN}` },
  });
  const result = await photon.projects.updateProjectApiKey({
    path: {
      apiKeyId: "apiKeyId",
      projectId: "projectId",
    },
    headers: {
      idempotencyKey: "idempotencyKey",
    },
    body: {
      permissions: [
        "events:read",
      ],
    },
  });
  ```

  ```python Python theme={null}
  import os

  from photon_api import Photon
  from photon_api.rpc_generated import UpdateProjectApiKeyInput

  photon = Photon(headers={"Authorization": f"Bearer {os.environ['PHOTON_API_TOKEN']}"})
  result = photon.projects.update_project_api_key(
      UpdateProjectApiKeyInput.model_validate({
          "path": {
              "apiKeyId": "apiKeyId",
              "projectId": "projectId",
          },
          "headers": {
              "Idempotency-Key": "idempotencyKey",
          },
          "body": {
              "permissions": [
                  "events:read",
              ],
          },
      })
  )
  ```

  ```rust Rust theme={null}
  use photon_ai_api::{Credential, PhotonClientBuilder, SecretString};

  let token = std::env::var("PHOTON_API_TOKEN")?;
  let client = PhotonClientBuilder::new()
      .credential("accountServiceKey", Credential::Bearer(SecretString::from(token)))
      .build()?;
  let result = client
      .update_project_api_key(
          "idempotencyKey".to_owned(),
          "apiKeyId".to_owned(),
          "projectId".to_owned(),
          &serde_json::from_value(serde_json::json!({
              "permissions": [
                  "events:read",
              ],
          }))?,
      )
      .await
      .map_err(|error| format!("{error:?}"))?
      .into_inner();
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={null}
  {
    "apiKey": {
      "apiKeyId": "string",
      "createdAt": "2026-01-01T00:00:00.000Z",
      "createdByAccountId": "string",
      "expiresAt": null,
      "name": "string",
      "permissions": [
        "string"
      ],
      "permissionsUpdatedAt": null,
      "projectId": "string",
      "revokedAt": null
    }
  }
  ```
</ResponseExample>

## Parameters

<ParamField header="Idempotency-Key" type={"string"} required>
  Identifies one logical mutation across retries.
</ParamField>

<ParamField path="apiKeyId" type={"string"} required />

<ParamField path="projectId" type={"string"} required />

## Body

<ParamField body="permissions" type={"array of ApiKeyPermission"} required />

## Returns

**`200`** The key with its new permission list. Sending the list it already holds returns it unchanged. ProjectApiKeyResponse

<ResponseField name="apiKey" type={"ApiKey"} required />


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.