> ## Documentation Index
> Fetch the complete documentation index at: https://openrouter.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# UpdateBYOKKeyRequest
## Fields
| Field | Type | Required | Description | Example |
| --------------------- | ----------------------------------------------- | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
| `AllowedAPIKeyHashes` | optionalnullable.OptionalNullable\[\[]`string`] | :heavy\_minus\_sign: | Optional allowlist of OpenRouter API key hashes (`api_keys.hash`) that may use this credential. `null` clears the restriction. Must contain at least one hash if provided. Hashes that do not belong to your account return a 400. | \[
"f01d52606dc8f0a8303a7b5cc3fa07109c2e346cec7c0a16b40de462992ce943"
] |
| `AllowedModels` | optionalnullable.OptionalNullable\[\[]`string`] | :heavy\_minus\_sign: | Optional allowlist of model slugs this credential may be used for. `null` means no restriction. | null |
| `AllowedUserIds` | optionalnullable.OptionalNullable\[\[]`string`] | :heavy\_minus\_sign: | Optional allowlist of user IDs that may use this credential. `null` means no restriction. | null |
| `Disabled` | `*bool` | :heavy\_minus\_sign: | Whether this credential is disabled. | false |
| `IsBYOKOnly` | `*bool` | :heavy\_minus\_sign: | Whether OpenRouter's shared endpoints on this provider are removed for every model, including models outside `allowed_models` and after all of your keys for the provider fail. The provider is skipped instead of spending OpenRouter credits. Only valid on non-fallback credentials. Omit to leave the stored value unchanged. | false |
| `IsFallback` | `*bool` | :heavy\_minus\_sign: | Whether this credential is treated as a fallback — used only after non-fallback keys for the same provider have been tried. Cannot be combined with `is_byok_only`. Omit to leave the stored value unchanged. | false |
| `IsRequired` | `*bool` | :heavy\_minus\_sign: | Whether OpenRouter's shared endpoints on this provider are removed for the models this credential applies to (its `allowed_models`, or every model when `null`). Requests for those models run only on your keys; models outside the allowlist may still fall back to shared capacity on this provider. Omit to leave the stored value unchanged. | false |
| `Key` | `*string` | :heavy\_minus\_sign: | A new raw provider API key to rotate the credential in-place. The previous key material is overwritten and the masked label is regenerated. Encrypted at rest and never returned in API responses. | sk-proj-newkey456... |
| `Name` | optionalnullable.OptionalNullable\[`string`] | :heavy\_minus\_sign: | Optional human-readable name for the credential. | Updated OpenAI Key |