Update a schedule
Update a schedule’s configuration, cron expression, or pause/resume it. Send action: "pause" or action: "resume" to toggle, or provide fields to update.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
ID of the schedule. Use the id field of a schedule from listSchedules.
Body
Pause or resume the schedule. Mutually exclusive with other fields.
pause, resume New cron expression, for example 0 9 * * 1.
New IANA timezone for the cron expression, for example America/New_York.
New display name of the schedule.
Full replacement list of domain UUIDs to test on each run.
Map of domain ID to specific paths to scan on each run.
Full replacement list of repository UUIDs to test on each run.
Map of repository ID to the branch name to test on each run.
Free-text security concerns to prioritize on each run.
Free-text areas of the target to test first on each run.
Free-text background about the target for each run.
ID of the network connector each run uses to reach a private network.
Full replacement list of private-network hosts or URLs to test through the connector.
When true, each run uses the organization knowledge base.
Self-hosted only: per-run LLM cost limit (USD) applied to each fired scan. Send null to clear.
x <= 1000000Scan tier for each fired pentest. The tier changes the credit price of each run. Send null to reset to ultra. Not applicable on self-hosted deployments, for organizations with raw model selection, and for organizations on the Enterprise plan.
lite, standard, ultra, null Replaces ALL stored manual credentials for the schedule. Omit to keep the stored credentials unchanged (the template endpoint returns their metadata only).
Saved test users to authenticate with on each run.
Full replacement set of custom headers. Stored header values are never returned by the template endpoint. Send keep_stored_value: true (with no value) to reuse the stored value of the existing schedule header with the same name.
Replaces the schedule's uploads. Stored uploads the caller cannot access (hidden from the template for target-scoped actors) are preserved automatically.
Per-run scope control applied to each fire. Send an empty object to clear the stored scope.
Email the schedule owner when each run completes.
Extra addresses to CC on each run's completion email. Validated only when notify_on_completion is true.