update_credential
Rename a credential and/or rotate its secret, publishing the change immediately so every target that uses this credential picks it up right away. Omit a secret field (or the whole auth object) to keep the existing value — the vault can never show a secret back to confirm it, so leaving it out means "unchanged," not "cleared." The destination host cannot be changed here: create a new credential for a new destination.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| auth | No | Same shape as create_credential. Omit to keep the existing auth entirely. | |
| name | No | New name. Omit to keep the existing one. | |
| credentialId | Yes | UUID of the credential (from list_credentials). | |
| destinationHost | No | Permanent — may only restate the credential's current host (omit it, or send back what list_credentials reported). Any other value is refused; a credential is never re-aimed, it is replaced. |