Skip to main content
PATCH
Update org security profile settings
Updates the organization’s default security-profile selections and returns the resulting settings.

Permissions

Requires a service user or personal access token with the ManageSecureModeProfiles permission at the organization level. Tokens used by a running Devin session are rejected, so a session cannot change the profiles that govern it.

Behavior

  • Omitted fields are left unchanged. null is rejected; to clear a default, set it to inherit, e.g. {"default": {"selection": "inherit"}} or {"automations_default": {"selection": "inherit"}}.
  • profile_id is required when selection is profile and must be omitted otherwise. The pinned profile may be org-owned or one of the enterprise’s shared profiles.
  • Running sessions pick up the change the next time they boot or wake.

Authorizations

Authorization
string
header
required

Service User credential (prefix: cog_)

Path Parameters

org_id
string
required

Organization ID (prefix: org-)

Example:

"org-abc123def456"

Body

application/json

PATCH semantics: omitted fields are left unchanged.

automations_default
SecurityProfileDefaultSelection · object | null

A tri-state default: inherit (no binding of its own — fall through to the ancestor's default), none (explicit opt-out: no profile, even when an ancestor has a recommended default), or profile (pin profile_id).

An opt-out cannot escape a mandatory ancestor profile: it is stored faithfully but has no effect while the mandatory profile exists.

default
SecurityProfileDefaultSelection · object | null

A tri-state default: inherit (no binding of its own — fall through to the ancestor's default), none (explicit opt-out: no profile, even when an ancestor has a recommended default), or profile (pin profile_id).

An opt-out cannot escape a mandatory ancestor profile: it is stored faithfully but has no effect while the mandatory profile exists.

Response

Successful Response

automations_default
SecurityProfileDefaultState · object
required

Default for automation-triggered sessions. Sits between the org/enterprise defaults and each automation's own binding.

default
SecurityProfileDefaultState · object
required

Read view of one stored default binding.