> ## Documentation Index
> Fetch the complete documentation index at: https://docs.app.strix.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Update a chat's cloud MCP connections

> Replaces the chat's connection selection and delivers it to the running agent. Null restores defaults from the chat's domain scope; an empty list disables cloud MCP access. Foreign or unknown ids are rejected. Unavailable organization connections and deleted ids already saved on the chat are dropped from explicit selections. Requires an admin or analyst role. Chat agent credentials cannot update connections. Scoped members can update only their own chats.



## OpenAPI

````yaml /openapi.json put /chat/{chatId}/connections
openapi: 3.1.0
info:
  title: Strix API
  version: 1.0.0
  description: >-
    Public REST API for the Strix autonomous penetration testing platform.
    Manage scans, vulnerabilities, assets, schedules, API tokens, and webhooks.
servers:
  - url: /api/v1
    description: Strix v1 API
security:
  - BearerAuth: []
tags:
  - name: Scans
    description: Launch, monitor, and manage security scans.
  - name: Vulnerabilities
    description: View and triage discovered vulnerabilities.
  - name: Assets
    description: Domains and repositories registered for scanning.
  - name: Schedules
    description: Recurring scan schedules (Pro plan).
  - name: Search
    description: Search across issues, pentests, PR reviews, chats, assets and schedules.
  - name: Tokens
    description: Manage API tokens for authentication.
  - name: Webhooks
    description: Configure webhook subscriptions for real-time event notifications.
  - name: Organization
    description: Workspace configuration for the authenticated organization.
  - name: Members
    description: Manage organization members and roles.
  - name: Invitations
    description: List and revoke organization invitations.
  - name: PR Reviews
    description: Automated security review of pull requests.
  - name: Connectors
    description: Network connectors for scanning internal/private targets.
  - name: Knowledge
    description: >-
      Organization knowledge base: documents, policies, and repo profiles that
      steer the agent.
  - name: Uploads
    description: Upload source/code/documentation archives for whitebox scans.
  - name: Integrations
    description: Third-party integrations (GitLab, Bitbucket, ticketing).
  - name: Chat
    description: Conversational agent sessions.
  - name: Analytics
    description: Aggregate dashboard analytics.
  - name: Test Users
    description: >-
      Per-domain test accounts (with optional MFA) the agent authenticates as
      during scans.
  - name: License
    description: Self-hosted license state, entitlements, and aggregate usage.
  - name: Supply Chain
    description: >-
      SBOM inventory, supply-chain findings, scans, and policy for connected
      repositories.
  - name: CLI
    description: >-
      Device authorization endpoints that let the Strix CLI and coding agents
      sign in and receive an API token.
  - name: Billing
    description: Credit balance, agent-payable top-ups, and automatic top-up settings.
  - name: Workspaces
    description: List, create, and switch workspaces.
  - name: Asset Discovery
    description: >-
      Passive reconnaissance runs that map the organization's external attack
      surface, and the discovered-asset inventory they fill.
  - name: Containers
    description: >-
      Container registries, tracked images, image scans, findings, and SBOM
      components.
  - name: Run Logs
    description: Persisted engine logs and the diagnostics bundle of a self-hosted install.
paths:
  /chat/{chatId}/connections:
    put:
      tags:
        - Chat
      summary: Update a chat's cloud MCP connections
      description: >-
        Replaces the chat's connection selection and delivers it to the running
        agent. Null restores defaults from the chat's domain scope; an empty
        list disables cloud MCP access. Foreign or unknown ids are rejected.
        Unavailable organization connections and deleted ids already saved on
        the chat are dropped from explicit selections. Requires an admin or
        analyst role. Chat agent credentials cannot update connections. Scoped
        members can update only their own chats.
      operationId: updateChatConnections
      parameters:
        - name: chatId
          in: path
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - cloud_connection_ids
              properties:
                cloud_connection_ids:
                  type:
                    - array
                    - 'null'
                  items:
                    type: string
                    format: uuid
                  description: >-
                    Null uses scope defaults, [] selects none, and a list is
                    normalized to available organization connections.
      responses:
        '200':
          description: The saved selection and whether the running agent acknowledged it.
          content:
            application/json:
              schema:
                type: object
                required:
                  - cloud_connection_ids
                  - delivered
                properties:
                  cloud_connection_ids:
                    type:
                      - array
                      - 'null'
                    items:
                      type: string
                      format: uuid
                  delivered:
                    type: boolean
        '400':
          description: Invalid selection or unavailable organization connection.
        '401':
          description: Unauthorized.
        '403':
          description: Insufficient role or scope.
        '404':
          description: Chat not found.
        '500':
          description: The selection could not be saved.
      security:
        - BearerAuth:
            - chat:write
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: >-
        API token obtained from the Tokens endpoint or CLI device login. Include
        as `Authorization: Bearer <token>`. Requests made with a managed CLI
        session also include `X-Strix-Workspace: <organization_id>` to pin a
        process to the workspace it started in; recovery endpoints report the
        current workspace after a concurrent switch.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.