> ## Documentation Index > Fetch the complete documentation index at: https://docs.corti.ai/llms.txt > Use this file to discover all available pages before exploring further. # Update an agent-scoped connector (partial) > Partially updates an agent-scoped connector using JSON Merge Patch (RFC 7386). `type` is immutable. **Future scope**: not yet implemented; the server returns `501`. ## OpenAPI ````yaml /agentic/auto-generated-openapi-v2.yml patch /v2/agentic/agents/{agentId}/connectors/{agentConnectorId} openapi: 3.1.0 info: title: Corti Agent API v2 version: 2.0.0 summary: Manage agents and converse with them over the A2A v1.0 protocol. description: > Version 2 of the Corti Agents REST API. ## What's new in v2 - **Unified `connectors`** — a single, flat, discriminated array replaces the v1 split between `experts`, `mcpServers`, and sub-agents. The envelope is extensible: new connector kinds (`a2a`, `openapi`, `custom`) slot in behind the `type` discriminator without breaking changes. - **Clean CRUD verbs** — `POST` creates, `GET` fetches/lists, `PATCH` performs a *true* partial update, `DELETE` removes. v1's PATCH was effectively a PUT. - **First-class metadata** — `visibility`, `model`, `lifecycle` (now a body field, not a query param), and free-form `labels`. ## A2A v1.0 only The conversational surface speaks **A2A protocol version `1.0` exclusively** (both the `JSONRPC` and `HTTP+JSON` bindings). The deprecated v0.3 binding from v1 is intentionally not carried forward. Per A2A §3.6, clients MUST send the `A2A-Version` header (`Major.Minor`, e.g. `1.0`) on every request to the `/a2a/*` surface, or supply it as the `A2A-Version` query parameter. This surface implements `1.0` only; an absent header is treated as `1.0`. Patch versions MUST NOT be sent. The server echoes the negotiated version in the `A2A-Version` response header. ## Partial updates (PATCH) `PATCH` uses **JSON Merge Patch** semantics (RFC 7386), served under the `application/merge-patch+json` media type: - **Omit a field** → left unchanged. - **`null`** → cleared / reset to its default. - **Arrays** (e.g. `connectors`) → *replaced wholesale*, never merged. To mutate a single connector without replacing the whole array, use the `/connectors` sub-resource endpoints. ## Streaming (Server-Sent Events) The streaming A2A surfaces — `message/stream`, `tasks/subscribe`, and the streaming JSON-RPC methods — respond with `text/event-stream`. The `text/event-stream` media type carries a sequence of Server-Sent Events; the attached schema describes a single event frame. Every event's `data` field is a string carrying a JSON document (`contentMediaType: application/json`); `contentSchema` declares the parsed payload (`StreamResponse` for the `HTTP+JSON` binding, `JSONRPCResponse` for the `JSONRPC` binding). The optional `id` field carries the SSE event id used for resumption via the `Last-Event-ID` request header. contact: name: Corti API Support url: https://corti.ai email: support@corti.ai license: name: Proprietary url: https://corti.ai/terms termsOfService: https://corti.ai/terms servers: - url: https://api.{env}.corti.app description: Corti regional API gateway variables: env: default: eu enum: - eu - us description: Deployment region. security: - bearerAuth: [] tenantHeader: [] tags: - name: Agents description: Create, read, update, and delete agents. - name: Agent Card description: A2A-compliant agent discovery cards. - name: A2A description: Converse with an agent over the A2A v1.0 protocol. - name: Connectors description: Manage the connectors attached to an agent. - name: Usage description: Bucketed invocation history for an agent. - name: Contexts description: Conversational contexts and their tasks. - name: Registry description: Discoverable, pre-built connectors offered by the platform. - name: Artifacts description: Retrieve artifacts produced by tasks. - name: Feedback description: Collect human or automated feedback on tasks and messages. paths: /v2/agentic/agents/{agentId}/connectors/{agentConnectorId}: parameters: - $ref: '#/components/parameters/AgentId' - $ref: '#/components/parameters/AgentConnectorId' patch: tags: - Connectors summary: Update an agent-scoped connector (partial) description: |- Partially updates an agent-scoped connector using JSON Merge Patch (RFC 7386). `type` is immutable. **Future scope**: not yet implemented; the server returns `501`. operationId: ConnectorsUpdate requestBody: required: true description: The connector fields to change, as a JSON Merge Patch (RFC 7386). content: application/merge-patch+json: schema: $ref: '#/components/schemas/ConnectorsPatchRequest' example: enabled: false responses: '200': description: The updated connector. content: application/json: schema: $ref: '#/components/schemas/CommonConnectorResponse' example: id: con.0192f4c8-7baf-7083-a46f-81d2bd70cf95 type: registry name: '@dedalus/coding-expert' enabled: true '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '404': $ref: '#/components/responses/NotFound' '501': description: Not yet implemented. content: application/json: schema: $ref: '#/components/schemas/CommonErrorResponse' components: parameters: AgentId: name: agentId in: path required: true description: Agent identifier (prefixed UUIDv7). schema: $ref: '#/components/schemas/CommonAgentIDValue' AgentConnectorId: name: agentConnectorId in: path required: true description: Agent-scoped connector identifier (prefixed UUIDv7). schema: $ref: '#/components/schemas/CommonConnectorIDValue' schemas: ConnectorsPatchRequest: type: object description: Merge-patch of a single connector. `type` is immutable. required: [] properties: enabled: type: boolean description: Whether the connector is active. examples: - false name: type: string description: New connector name. examples: - policybot-v2 url: type: - string - 'null' format: uri description: New connector URL; `null` clears it. examples: - https://mcp.example.com/v2 config: type: - object - 'null' additionalProperties: true description: New connector config; `null` clears it. example: timeout: 30 auth: oneOf: - $ref: '#/components/schemas/CommonConnectorAuth' - type: 'null' example: type: bearer additionalProperties: false CommonConnectorResponse: description: A connector attached to an agent, discriminated by `type`. oneOf: - $ref: '#/components/schemas/CommonRegistryConnectorProvisioned' - $ref: '#/components/schemas/CommonMcpConnector' - $ref: '#/components/schemas/CommonAgentConnector' - $ref: '#/components/schemas/CommonA2AConnector' - $ref: '#/components/schemas/CommonSchemaConnector' discriminator: propertyName: type mapping: registry: $ref: '#/components/schemas/CommonRegistryConnectorProvisioned' mcp: $ref: '#/components/schemas/CommonMcpConnector' agent: $ref: '#/components/schemas/CommonAgentConnector' a2a: $ref: '#/components/schemas/CommonA2AConnector' schema: $ref: '#/components/schemas/CommonSchemaConnector' CommonErrorResponse: type: object description: > Corti management-plane error envelope, used by all non-A2A endpoints. - **Standard** — when the error chain contains at least one `PublicError`, `code` and `message` come from the outermost `PublicError` and `details` is merged across the whole chain (outer values take precedence). - **Fallback** — when the chain contains no `PublicError`, the response is a generic `500` carrying a `requestId` for support reference. - **Validation** — a single `PublicError` whose `details.validationErrors` lists the offending fields. Field names use camelCase on the wire (e.g. `requestId`, `howToFix`). The free-form `details` object may carry arbitrary caller-defined keys. Rate limiting (HTTP 429) is not yet implemented; the server does not emit a 429 response. required: - error properties: error: type: object required: - code - message properties: code: type: string description: Stable, machine-readable, SCREAMING_SNAKE_CASE error code. examples: - ASSIGNMENT_CONFLICT - VALIDATION_FAILED - INTERNAL_ERROR message: type: string description: Human-readable explanation. howToFix: type: string description: Optional guidance for the caller to resolve the error. details: type: object description: | Structured context, merged from every `PublicError` in the chain (outer values win). Omitted on the generic fallback response. additionalProperties: true properties: validationErrors: type: array description: Present when `code` is `VALIDATION_FAILED`. items: type: object required: - field - reason properties: field: type: string description: The field that failed validation. reason: type: string description: Why the field failed validation. requestId: type: string description: > Correlation ID from request middleware. Included only on the generic `500` fallback so consumers can quote it in support requests. description: The error object with code, message, and optional details. examples: - error: code: ASSIGNMENT_CONFLICT message: could not complete assignment details: assignment_id: asg_99 expert_id: exp_42 - error: code: VALIDATION_FAILED message: validation failed details: validationErrors: - field: email reason: invalid format - field: name reason: required - error: code: INTERNAL_ERROR message: internal server error requestId: req_abc123 CommonAgentIDValue: type: string format: agent-id description: >- Agent identifier. Accepts `agt.` or a bare UUIDv7 on input; always returned prefixed. pattern: ^(agt\.)?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ examples: - agt.0192f4c8-2c5a-7b3e-9f1a-3c8d6e2b7a40 CommonConnectorIDValue: type: string format: connector-id description: >- Connector identifier. Accepts `con.` or a bare UUIDv7 on input; always returned prefixed. pattern: ^(con\.)?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ examples: - con.0192f4c8-7baf-7083-a46f-81d2bd70cf95 CommonConnectorAuth: type: object description: Authentication configuration for an outbound connector. required: - type properties: type: type: string enum: - none - bearer - apiKey - oauth2 description: Authentication mechanism. scope: type: string description: OAuth2 scope requested. redirectUrl: type: string format: uri description: OAuth2 redirect URL. ref: type: string description: >- Reference to a server-side stored secret. Mutually exclusive with inline credentials passed at call time. additionalProperties: false examples: - type: oauth2 scope: read:policies redirectUrl: https://app.corti.ai/oauth/callback CommonRegistryConnectorProvisioned: description: A connector provisioned from a registry entry. allOf: - $ref: '#/components/schemas/CommonConnectorBase' - type: object required: - name properties: type: const: registry description: Connector discriminator; always `registry`. name: type: string description: Registry connector name. examples: - '@dedalus/coding-expert' config: type: object description: >- Connector-specific configuration validated against the registry schema. additionalProperties: true CommonMcpConnector: description: A connector backed by a remote MCP server. allOf: - $ref: '#/components/schemas/CommonConnectorBase' - type: object required: - name - url properties: type: const: mcp description: Connector discriminator; always `mcp`. name: type: string description: Display name for the MCP connector. url: type: string format: uri description: MCP server endpoint URL. auth: $ref: '#/components/schemas/CommonConnectorAuth' CommonAgentConnector: description: A connector that delegates to another agent. allOf: - $ref: '#/components/schemas/CommonConnectorBase' - type: object required: - agentId properties: type: const: agent description: Connector discriminator; always `agent`. agentId: $ref: '#/components/schemas/CommonAgentIDValue' CommonA2AConnector: description: A connector that delegates to a remote A2A agent by endpoint URL. allOf: - $ref: '#/components/schemas/CommonConnectorBase' - type: object required: - url properties: type: const: a2a description: Connector discriminator; always `a2a`. name: type: string description: Optional display name for the remote A2A agent. url: type: string format: uri description: >- The remote agent's A2A endpoint (typically a `.well-known/agent-card.json`). examples: - https://marginalia.polycode.co.uk/.well-known/agent-card.json CommonSchemaConnector: description: A connector backed by a schema definition. allOf: - $ref: '#/components/schemas/CommonConnectorBase' - type: object required: - name - schema properties: type: const: schema description: Connector discriminator; always `schema`. name: type: string description: Schema connector name. Used as the tool name the LLM calls. description: type: string description: What the tool does. Read by the LLM to decide when to call it. schema: type: object description: JSON Schema defining the tool's output shape. additionalProperties: true transition: type: string enum: - complete - input_required description: >- If set, calling this tool terminates the loop in the given state after validating and storing the data part. No further LLM call. CommonConnectorBase: type: object description: Fields common to every connector kind. required: - id - type properties: id: $ref: '#/components/schemas/CommonConnectorIDValue' readOnly: true description: > Server-generated connector identifier (prefixed UUIDv7). Stable across PATCH replacements where the underlying spec is unchanged. Used by observability/HITL to reference a connector unambiguously. type: $ref: '#/components/schemas/CommonConnectorType' enabled: type: boolean default: true description: >- Whether the connector is active for invocations. Only `schema` connectors return this field today; `mcp`, `registry`, `agent`, and `a2a` connectors omit it (treat as enabled). CommonConnectorType: type: string description: | The connector discriminator. v2 ships `registry`, `mcp`, `agent`, `a2a`, and `schema`; `openapi` and `custom` are reserved for future minor versions. enum: - registry - mcp - agent - a2a - schema responses: BadRequest: description: The request was malformed. content: application/json: schema: $ref: '#/components/schemas/CommonErrorResponse' Unauthorized: description: Missing or invalid credentials. content: application/json: schema: $ref: '#/components/schemas/CommonErrorResponse' NotFound: description: The resource does not exist or is not visible to the caller. content: application/json: schema: $ref: '#/components/schemas/CommonErrorResponse' securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT description: OAuth 2.0 / OIDC bearer token. tenantHeader: type: apiKey in: header name: Tenant-Name description: The tenant the request operates within. ````