Skip to main content
PATCH
Error

Authorizations

Authorization
string
header
required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Scopes

organizations:write

Body

application/json
enabled
boolean
hidden_items
string[]

Replaces the list of sections hidden from the public page. Unknown keys are dropped. Keys: programs, pentests, checks. Empty shows everything.

Maximum array length: 64
Maximum string length: 64

Response

Updated settings.

success
boolean
required
organization_id
string
required
enabled
boolean
required

Whether the page and badge are publicly reachable. Publishing requires at least one domain the organization verified in Strix.

slug
string | null
required

Random UUID Strix assigns to the public page: /trust/{slug}. Null until the first update.

verified_domains
string[]
required

Domains the organization verified in Strix. The page can be published only while this list is not empty.

hidden_items
string[]
required

Sections the admin hides from the public page. Keys: programs, pentests, checks. Empty shows everything.

page_url
string<uri> | null
required
badge_url
string<uri> | null
required

SVG badge. Append ?theme=light for light backgrounds.

badge_embed_html
string | null
required

Ready-to-paste HTML that links the badge to the page.

updated_by
string | null
required
updated_at
string<date-time> | null
required
summary
object | null
required

What the public page shows, read live from the workspace. Only dates and on or off facts, no counts and no findings. The pentests and programs fields already exclude hidden items.