Docs

Type a word or a question. Esc closes the search.

Sign in Start free

Update company security settings

Replaces AI access, two-factor policy and audit-drain URL or secret settings.

PUT https://app.upfour.io/v1/organization/security
PUT https://app.upfour.io/v1/organization/security

A real request. Sending it changes data in your up4 account.

Authorization
AuthorizationA pls_ key. It stays in this browser tab. Needs organization.write.
Body
More fields4
allow_ai_features Replaced on every call: omitted means false.
require_2fa Replaced on every call: omitted means false.

Sent directly from your browser to https://app.upfour.io/v1. Mutating calls get an automatic Idempotency-Key when the field is empty.

Request
Responsenot sent yet
Fill in a key and press Send request (⌘↵).
The answer appears here.
scope organization.write stable returns 200

Body

application/json required 4 fields

All other fields4 fields
allow_ai_featuresboolean

Replaced on every call: omitted means false.

audit_drain_secretstring

Signing secret of the drain. Write-only; empty keeps the stored secret.

audit_drain_urlstring

HTTPS endpoint that receives each audit-log entry. Empty switches the drain off.

require_2faboolean

Replaced on every call: omitted means false.

Returns

A successful request returns 200 with application/json.

Response fields 1 top-level fields
FieldTypeDescription
data OrganizationSecuritySettings
OrganizationSecuritySettings · 12 fields
FieldTypeDescription
allow_ai_features boolean
audit_drain AuditDrainConfig
AuditDrainConfig · 2 fields
FieldTypeDescription
secret string Always empty: the secret is never returned. audit_drain_configured says whether a drain is set up.
url string
audit_drain_configured boolean
members_without_2fa MemberWithout2FA[] · nullable
Each item · 5 fields
FieldTypeDescription
email string
name string
password_set boolean false for an account that only signs in by email link; it has to add a password before it can set up an authenticator app.
role string one ofowneradminmemberviewer
user_id uuid
require_2fa boolean

Errors

Only the errors this operation can return. Every error uses the same envelope.

Status Code Meaning
400 bad_request The request is malformed or fails validation.
403 permission_denied The credentials do not permit this action.

Every call can also return unauthorized (401), rate_limit_exceeded (429) or internal_error (500 / 502). See Responses and errors.