Update governance metadata (and tags) on one asset.
curl --request PATCH \
--url https://api.secfix.com/v1/inventory/assets/{id} \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'Idempotency-Key: <idempotency-key>' \
--data '
{
"classification": "CONFIDENTIAL",
"description": "Primary production web server.",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"tags": [
{
"key": "environment",
"value": "production"
}
]
}
'import requests
url = "https://api.secfix.com/v1/inventory/assets/{id}"
payload = {
"classification": "CONFIDENTIAL",
"description": "Primary production web server.",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"tags": [
{
"key": "environment",
"value": "production"
}
]
}
headers = {
"Idempotency-Key": "<idempotency-key>",
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.patch(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'PATCH',
headers: {
'Idempotency-Key': '<idempotency-key>',
Authorization: 'Bearer <token>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
classification: 'CONFIDENTIAL',
description: 'Primary production web server.',
ownerId: 'a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d',
tags: [{key: 'environment', value: 'production'}]
})
};
fetch('https://api.secfix.com/v1/inventory/assets/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.secfix.com/v1/inventory/assets/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "PATCH",
CURLOPT_POSTFIELDS => json_encode([
'classification' => 'CONFIDENTIAL',
'description' => 'Primary production web server.',
'ownerId' => 'a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d',
'tags' => [
[
'key' => 'environment',
'value' => 'production'
]
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json",
"Idempotency-Key: <idempotency-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.secfix.com/v1/inventory/assets/{id}"
payload := strings.NewReader("{\n \"classification\": \"CONFIDENTIAL\",\n \"description\": \"Primary production web server.\",\n \"ownerId\": \"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d\",\n \"tags\": [\n {\n \"key\": \"environment\",\n \"value\": \"production\"\n }\n ]\n}")
req, _ := http.NewRequest("PATCH", url, payload)
req.Header.Add("Idempotency-Key", "<idempotency-key>")
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.patch("https://api.secfix.com/v1/inventory/assets/{id}")
.header("Idempotency-Key", "<idempotency-key>")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"classification\": \"CONFIDENTIAL\",\n \"description\": \"Primary production web server.\",\n \"ownerId\": \"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d\",\n \"tags\": [\n {\n \"key\": \"environment\",\n \"value\": \"production\"\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.secfix.com/v1/inventory/assets/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Patch.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"classification\": \"CONFIDENTIAL\",\n \"description\": \"Primary production web server.\",\n \"ownerId\": \"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d\",\n \"tags\": [\n {\n \"key\": \"environment\",\n \"value\": \"production\"\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"accountId": "123456789012",
"categoryKey": "CLOUD",
"classification": "CONFIDENTIAL",
"completeStatus": "COMPLETE",
"createdAt": "2026-01-15T09:30:00.000Z",
"dataStored": {
"containsPatientData": false,
"containsUserData": true,
"userDataInfo": "Customer contact records"
},
"description": "Primary production web server.",
"email": "jane.doe@example.com",
"externalId": "i-0abc123def456",
"id": "3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"lastCheckedAt": "2026-06-30T02:00:00.000Z",
"name": "prod-web-01",
"osVersion": "macOS 14.5",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"ownerSource": "MANUAL",
"region": "eu-central-1",
"serialNumber": "C02XY1234ABC",
"tags": [
{
"key": "environment",
"readOnly": false,
"value": "production"
}
],
"type": "SERVER"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}Inventory
Update governance metadata (and tags) on one asset.
Requires write access (all:write). Governance fields only; employee rows are read-only.
PATCH
/
v1
/
inventory
/
assets
/
{id}
Update governance metadata (and tags) on one asset.
curl --request PATCH \
--url https://api.secfix.com/v1/inventory/assets/{id} \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'Idempotency-Key: <idempotency-key>' \
--data '
{
"classification": "CONFIDENTIAL",
"description": "Primary production web server.",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"tags": [
{
"key": "environment",
"value": "production"
}
]
}
'import requests
url = "https://api.secfix.com/v1/inventory/assets/{id}"
payload = {
"classification": "CONFIDENTIAL",
"description": "Primary production web server.",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"tags": [
{
"key": "environment",
"value": "production"
}
]
}
headers = {
"Idempotency-Key": "<idempotency-key>",
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.patch(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'PATCH',
headers: {
'Idempotency-Key': '<idempotency-key>',
Authorization: 'Bearer <token>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
classification: 'CONFIDENTIAL',
description: 'Primary production web server.',
ownerId: 'a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d',
tags: [{key: 'environment', value: 'production'}]
})
};
fetch('https://api.secfix.com/v1/inventory/assets/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.secfix.com/v1/inventory/assets/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "PATCH",
CURLOPT_POSTFIELDS => json_encode([
'classification' => 'CONFIDENTIAL',
'description' => 'Primary production web server.',
'ownerId' => 'a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d',
'tags' => [
[
'key' => 'environment',
'value' => 'production'
]
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json",
"Idempotency-Key: <idempotency-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.secfix.com/v1/inventory/assets/{id}"
payload := strings.NewReader("{\n \"classification\": \"CONFIDENTIAL\",\n \"description\": \"Primary production web server.\",\n \"ownerId\": \"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d\",\n \"tags\": [\n {\n \"key\": \"environment\",\n \"value\": \"production\"\n }\n ]\n}")
req, _ := http.NewRequest("PATCH", url, payload)
req.Header.Add("Idempotency-Key", "<idempotency-key>")
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.patch("https://api.secfix.com/v1/inventory/assets/{id}")
.header("Idempotency-Key", "<idempotency-key>")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"classification\": \"CONFIDENTIAL\",\n \"description\": \"Primary production web server.\",\n \"ownerId\": \"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d\",\n \"tags\": [\n {\n \"key\": \"environment\",\n \"value\": \"production\"\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.secfix.com/v1/inventory/assets/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Patch.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"classification\": \"CONFIDENTIAL\",\n \"description\": \"Primary production web server.\",\n \"ownerId\": \"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d\",\n \"tags\": [\n {\n \"key\": \"environment\",\n \"value\": \"production\"\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"accountId": "123456789012",
"categoryKey": "CLOUD",
"classification": "CONFIDENTIAL",
"completeStatus": "COMPLETE",
"createdAt": "2026-01-15T09:30:00.000Z",
"dataStored": {
"containsPatientData": false,
"containsUserData": true,
"userDataInfo": "Customer contact records"
},
"description": "Primary production web server.",
"email": "jane.doe@example.com",
"externalId": "i-0abc123def456",
"id": "3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"lastCheckedAt": "2026-06-30T02:00:00.000Z",
"name": "prod-web-01",
"osVersion": "macOS 14.5",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"ownerSource": "MANUAL",
"region": "eu-central-1",
"serialNumber": "C02XY1234ABC",
"tags": [
{
"key": "environment",
"readOnly": false,
"value": "production"
}
],
"type": "SERVER"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}Authorizations
Bearer access token obtained from /oauth/token.
Headers
Required. A unique key (max 256 chars) that makes the write idempotent; reusing a key replays the original response. Send a fresh UUID per distinct request. See docs.
Maximum string length:
256Example:
"b0f8e5a2-3c1d-4e6f-8a9b-0c1d2e3f4a5b"
Path Parameters
Body
application/json
Governance-only metadata update. Governance fields only - no name, device facts, status, create or delete.
Data classification.
Example:
"CONFIDENTIAL"
Governance description (max 500 chars).
Maximum string length:
500Example:
"Primary production web server."
New owner's employee UUID.
Example:
"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d"
Tags to set (single-asset PATCH only; not supported in bulk). Diffed add/remove against existing customer tag keys; an unknown key is rejected.
Maximum array length:
20Show child attributes
Show child attributes
Response
Asset updated.
Public asset. The id is an opaque public reference (never the internal PK); for EMPLOYEE-category rows it is the stable employee UUID. Category-specific fields are populated only for their owning category; completeStatus is read-only.
Cloud account id (CLOUD assets).
Example:
"123456789012"
Asset category key.
Available options:
CLOUD, COMPUTER, CUSTOM, INFORMATION, EMPLOYEE Example:
"CLOUD"
Data classification.
Example:
"CONFIDENTIAL"
Read-only completeness status. COMPLETE when an owner is assigned, else INCOMPLETE. Applies to all categories.
Available options:
COMPLETE, INCOMPLETE Example:
"COMPLETE"
Creation timestamp (UTC).
Example:
"2026-01-15T09:30:00.000Z"
User/patient-data flags for INFORMATION/CUSTOM assets. Read-only.
Show child attributes
Show child attributes
Governance description.
Example:
"Primary production web server."
Employee email - PII, surfaced under read access / all:read (EMPLOYEE assets).
Example:
"jane.doe@example.com"
Identifier of the asset in its source system.
Example:
"i-0abc123def456"
Opaque public asset id (UUID).
Example:
"3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f"
Timestamp of the last compliance check (UTC), where applicable.
Example:
"2026-06-30T02:00:00.000Z"
Asset display name.
Example:
"prod-web-01"
Operating system family and version, combined (COMPUTER assets).
Example:
"macOS 14.5"
Owner's employee UUID.
Example:
"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d"
Origin of the owner assignment.
Example:
"MANUAL"
Cloud region/location (CLOUD assets).
Example:
"eu-central-1"
Hardware serial number (COMPUTER assets).
Example:
"C02XY1234ABC"
Structured tags on the asset.
Show child attributes
Show child attributes
Asset type within its category.
Example:
"SERVER"