Update an asset

PUThttps://api.fortwatch.ai/app/assets/{id}

Scope assets:writeOperation ID updateAsset

Changes the project, the value or type (checked as when adding, then validated again), the scan profile (portScanMode, nucleiMinSeverity) or the scanners turned off for it.

Parameters

Name	In	Type	Description
`id`required	path	integer

Request body

JSON, required.

Field	Type	Description
`projectId`	integer
`name`	string \| null
`type`	string
`value`	string
`disabledScannerTypes`	string[]
`bucketProvider`	string \| null
`portScanMode`	string	One of: `full`, `fast`
`nucleiMinSeverity`	string	One of: `low`, `medium`, `high`, `critical`
`acceptExtraCharge`	boolean

Example request

curl -X PUT "https://api.fortwatch.ai/app/assets/42" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "projectId": 42,
  "name": "Production",
  "type": "string",
  "value": "app.example.com",
  "disabledScannerTypes": [
    "string"
  ],
  "bucketProvider": "string",
  "portScanMode": "full",
  "nucleiMinSeverity": "low",
  "acceptExtraCharge": true
}'

Response 200

The request succeeded.

Field	Type	Description
`id`required	number
`projectId`required	number
`name`required	string \| null
`type`required	string
`value`required	string
`status`required	string
`canonicalUrl`required	string \| null
`resolvedIp`required	string \| null
`cdnProvider`required	string \| null
`bucketProvider`required	string \| null
`lastCheckedAt`required	string (date-time) \| null
`failReason`required	string \| null
`skippedRedirectHost`required	string \| null
`disabledScannerTypes`required	string[]
`portScanMode`required	string
`nucleiMinSeverity`required	string
`ownershipVerifiedAt`required	string (date-time) \| null
`ownershipToken`required	string
`ownershipMethod`required	string \| null
`createdAt`required	string (date-time)
`updatedAt`required	string (date-time)
`project`required	object
`id`required	number
`name`required	string
`color`required	string

json

{
  "id": 42,
  "projectId": 42,
  "name": "Production",
  "type": "string",
  "value": "app.example.com",
  "status": "string",
  "canonicalUrl": "string",
  "resolvedIp": "string",
  "cdnProvider": "string",
  "bucketProvider": "string",
  "lastCheckedAt": "2026-10-16T12:00:00.000Z",
  "failReason": "string",
  "skippedRedirectHost": "string",
  "disabledScannerTypes": [
    "string"
  ],
  "portScanMode": "string",
  "nucleiMinSeverity": "string",
  "ownershipVerifiedAt": "2026-10-16T12:00:00.000Z",
  "ownershipToken": "string",
  "ownershipMethod": "string",
  "createdAt": "2026-10-16T12:00:00.000Z",
  "updatedAt": "2026-10-16T12:00:00.000Z",
  "project": {
    "id": 42,
    "name": "Production",
    "color": "string"
  }
}

Errors

`400`	The request is not valid: a field is missing or has the wrong shape (the message names it).
`401`	No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
`403`	Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
`404`	Not found in your workspace.
`429`	Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.

Every code is explained in Errors.

This page as Markdown