> ## Documentation Index
> Fetch the complete documentation index at: https://developer.secfix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Bulk-update governance metadata on many assets.

> Requires the inventory:write scope. Tags are not supported in bulk; employee ids are rejected with no partial apply.



## OpenAPI

````yaml /api-reference/openapi.yaml patch /v1/inventory/assets
openapi: 3.0.1
info:
  title: Secfix Public API
  description: >-
    Machine-to-machine API for the Secfix compliance platform. Authenticate with
    the OAuth 2.0 client_credentials grant via POST /oauth/token, then call /v1
    endpoints with the bearer access token. Errors follow RFC 7807
    (application/problem+json) with stable code strings; lists use opaque cursor
    pagination.
  contact:
    name: Secfix Support
    url: https://secfix.com
    email: support@secfix.com
  license:
    name: Proprietary
    url: https://secfix.com/license
  version: 1.0.0
servers:
  - url: https://api.secfix.com
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Health
    description: Service liveness.
  - name: Inventory
    description: List and govern assets across all categories.
  - name: OAuth
    description: Token endpoint for OAuth 2.0 client-credentials authentication.
  - name: Computers
    description: Read-only monitored computers with device compliance posture.
paths:
  /v1/inventory/assets:
    patch:
      tags:
        - Inventory
      summary: Bulk-update governance metadata on many assets.
      description: >-
        Requires the inventory:write scope. Tags are not supported in bulk;
        employee ids are rejected with no partial apply.
      operationId: bulkUpdate
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BulkAssetMetadataPatchRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BulkUpdateSummaryDto'
components:
  schemas:
    BulkAssetMetadataPatchRequest:
      required:
        - ids
        - patch
      type: object
      properties:
        ids:
          maxItems: 100
          minItems: 1
          type: array
          description: Public asset ids to update (1 to 100).
          items:
            type: string
            description: Public asset ids to update (1 to 100).
            format: uuid
        patch:
          $ref: '#/components/schemas/AssetMetadataPatchRequest'
      description: >-
        Bulk governance update. Applies patch to every id. tags are not
        supported in bulk (a non-null patch.tags is rejected). Employee ids are
        rejected with no partial apply.
    BulkUpdateSummaryDto:
      type: object
      properties:
        failedUpdates:
          type: integer
          description: Number of assets that could not be updated.
          format: int32
          example: 2
        successfulUpdates:
          type: integer
          description: Number of assets successfully updated.
          format: int32
          example: 18
      description: >-
        Summary of a bulk governance update. The updated assets are not
        returned.
    AssetMetadataPatchRequest:
      type: object
      properties:
        classification:
          type: string
          description: Data classification.
          example: CONFIDENTIAL
        description:
          maxLength: 500
          minLength: 0
          type: string
          description: Governance description (max 500 chars).
          example: Primary production web server.
        ownerId:
          type: string
          description: New owner's employee UUID.
          format: uuid
          example: a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d
        tags:
          maxItems: 20
          minItems: 0
          type: array
          description: >-
            Tags to set (single-asset PATCH only; not supported in bulk). Diffed
            add/remove against existing customer tag keys; an unknown key is
            rejected.
          items:
            $ref: '#/components/schemas/TagDto'
      description: >-
        Governance-only metadata update. Governance fields only - no name,
        device facts, status, create or delete.
    TagDto:
      type: object
      properties:
        key:
          maxLength: 1000
          minLength: 0
          type: string
          description: Tag key (an existing customer tag definition).
          example: environment
        value:
          maxLength: 255
          minLength: 0
          type: string
          description: Tag value.
          example: production
      description: >-
        Structured asset tag. On writes, key must match an existing customer tag
        key; value is read-only in v1.
  securitySchemes:
    bearerAuth:
      type: http
      description: Bearer access token obtained from /oauth/token.
      scheme: bearer
      bearerFormat: JWT

````