Updates the metadata of a stored third-party credential. A field you omit keeps its current value. The credential value itself cannot be changed here and is never returned. Only credentials with a token_type of text can be updated; any other type responds with 400. A credential the list endpoint does not return is also not updatable, and responds with 404.
Preview Intercom API version. Used for closed beta endpoints or other features under managed availability.
A name for the credential, so a teammate can identify it later.
An optional prefix placed before the credential value in the header, for example Bearer.
An optional description of what the credential is used for.
- The production API serverhttps://api.intercom.io/auth_tokens/{id}
- The european API serverhttps://api.eu.intercom.io/auth_tokens/{id}
- The australian API serverhttps://api.au.intercom.io/auth_tokens/{id}
curl -i -X PATCH \
https://api.intercom.io/auth_tokens/12345 \
-H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
-H 'Content-Type: application/json' \
-H 'Intercom-Version: Preview' \
-d '{
"name": "Fulfilment API key (rotated host)",
"description": "Used by the order status connector"
}'successful
An optional description of what the credential is used for.
How the credential is presented to the external API, for example as a header value or an HMAC signature.
The request header the credential is sent in.
The prefix placed before the credential value in the header, for example Bearer.
The domain the credential is scoped to, if one was set.
The time the credential was created, as an ISO 8601 timestamp.
{ "type": "auth_token", "id": "12345", "name": "Fulfilment API key (rotated host)", "description": "Used by the order status connector", "token_type": "text", "request_header_key": "Authorization", "token_prefix": "Bearer", "domain": "api.fulfilment.example.com", "created_at": "2025-11-15T09:30:00Z", "updated_at": "2026-01-20T14:22:15Z" }