Update package identity, owner, project scope or access metadata

PATCH/v1/packages/{packageId}

Requires the current revision; conflicts return 409. Access metadata requires package_access_manage and uses centralized permission policies and team shares. Only the current owner can set ownerId to an active member of the same organization; the creator and original-resource ownership remain unchanged. Project scope uses metadata.projectScope.projectIds (up to 50 accessible project IDs), and does not change sharing permissions.

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters

Name	Location	Type	Required	Description
packageId	path	string	Yes	—

Query parameters

None.

Body schema

Content type: application/json · Required

Field	Type	Required	Description
revision	integer	Yes	—
name	string	No	Human-readable name.
description	string	No	Human-readable description.
metadata	object	No	Free-form metadata object.
ownerId	string	No	—

What the API returns

Each response code below includes the documented payload shape for the ACP API.

200Package operation resultapplication/json

Field	Type	Required	Description
package	object	Yes	—
package.ownershipInvitation	object	No	—
package.ownershipInvitation.id	string	Yes	Unique identifier.
package.ownershipInvitation.organizationId	string	Yes	—
package.ownershipInvitation.kind	share \| ownership	Yes	—
package.ownershipInvitation.resourceType	string	Yes	—
package.ownershipInvitation.resourceId	string	Yes	—
package.ownershipInvitation.resourceName	string	Yes	—
package.ownershipInvitation.recipientUserId	string	Yes	—
package.ownershipInvitation.invitedByUserId	string	Yes	—
package.ownershipInvitation.accessLevel	use \| edit \| manage	Yes	—
package.ownershipInvitation.status	pending \| accepted \| declined \| revoked \| expired	Yes	Current lifecycle status.
package.ownershipInvitation.expiresAt	string	Yes	—
package.ownershipInvitation.decidedAt	string	Yes	—
package.ownershipInvitation.createdAt	string	Yes	ISO 8601 timestamp.
package.ownershipInvitation.updatedAt	string	Yes	ISO 8601 timestamp.
package.id	string	Yes	Unique identifier.
package.organizationId	string	Yes	—
package.ownerId	string	Yes	—
package.creatorId	string	Yes	—
package.name	string	Yes	Human-readable name.
package.description	string	Yes	Human-readable description.
package.metadata	object	Yes	Free-form metadata object.
package.revision	integer	Yes	—
package.resourceCount	integer	Yes	—
package.createdAt	string	Yes	ISO 8601 timestamp.
package.updatedAt	string	Yes	ISO 8601 timestamp.
package.canEdit	boolean	No	—
package.canManage	boolean	No	—
package.items	object[]	No	—
package.items[].id	string	Yes	Unique identifier.
package.items[].resourceType	metronome_workflow \| server \| agent \| skill \| environment \| prompt \| knowledge_library \| database \| thread	Yes	—
package.items[].resourceId	string	Yes	—
package.items[].name	string	Yes	Human-readable name.
package.items[].description	string	Yes	Human-readable description.
package.items[].kind	string	Yes	—
package.items[].avatarUrl	string	No	The agent's own profile image, distinct from creatorAvatarUrl. Optional; an empty value uses the client's standard fallback.
package.items[].creatorId	string	No	—
package.items[].creatorName	string	No	—
package.items[].creatorAvatarUrl	string	No	—
package.items[].createdAt	string	No	ISO 8601 timestamp.
package.items[].updatedAt	string	No	ISO 8601 timestamp.
package.items[].sourceOwnerId	string	Yes	—
package.items[].approvedByUserId	string	Yes	—
package.items[].sourceUpdatedAt	string	Yes	—
package.items[].addedAt	string	Yes	—
package.items[].messageIds	string[]	No	—
package.items[].snapshot	object	Yes	—
package.items[].snapshot.messages	object[]	Yes	—
package.items[].snapshot.messages[].id	string	Yes	Unique identifier.
package.items[].snapshot.messages[].role	user \| assistant	Yes	—
package.items[].snapshot.messages[].content	string	Yes	Raw text content.
package.items[].snapshot.messages[].createdAt	string	Yes	ISO 8601 timestamp.
package.items[].snapshot.capturedAt	string	Yes	—
package.creatorName	string	No	—
package.creatorAvatarUrl	string	No	—
package.ownerName	string	No	—
package.ownerAvatarUrl	string	No	—

400Package request rejected. HTTP status distinguishes invalid input (400), authentication (401), API scope (403), unavailable resource (404), changed revision or confirmation (409), and unsupported storage (503).application/json

Field	Type	Required	Description
error	string	No	—
code	string	No	—
message	string	No	Message text.

401Package request rejected. HTTP status distinguishes invalid input (400), authentication (401), API scope (403), unavailable resource (404), changed revision or confirmation (409), and unsupported storage (503).application/json

Field	Type	Required	Description
error	string	No	—
code	string	No	—
message	string	No	Message text.

403Package request rejected. HTTP status distinguishes invalid input (400), authentication (401), API scope (403), unavailable resource (404), changed revision or confirmation (409), and unsupported storage (503).application/json

Field	Type	Required	Description
error	string	No	—
code	string	No	—
message	string	No	Message text.

404Package request rejected. HTTP status distinguishes invalid input (400), authentication (401), API scope (403), unavailable resource (404), changed revision or confirmation (409), and unsupported storage (503).application/json

Field	Type	Required	Description
error	string	No	—
code	string	No	—
message	string	No	Message text.

409Package request rejected. HTTP status distinguishes invalid input (400), authentication (401), API scope (403), unavailable resource (404), changed revision or confirmation (409), and unsupported storage (503).application/json

Field	Type	Required	Description
error	string	No	—
code	string	No	—
message	string	No	Message text.

503Package request rejected. HTTP status distinguishes invalid input (400), authentication (401), API scope (403), unavailable resource (404), changed revision or confirmation (409), and unsupported storage (503).application/json

Field	Type	Required	Description
error	string	No	—
code	string	No	—
message	string	No	Message text.

Update package identity, owner, project scope or access metadata

Response 200

See the ACP quickstart and SDK flow