# diagrid mcpserver update

Update an MCP server's scopes, connection, or credentials

### Description

Update an MCP server. Any field you set is changed; fields you omit keep
their stored value. Connection fields (url, transport, timeout, headers,
protocol version) and OAuth2 credentials can all be edited, and a changed
\--oauth2-client-secret rotates the stored credential. Use --clear-scopes or
\--clear-headers to reset those lists.

```
diagrid mcpserver update <mcpserver> [flags]
```

### Examples

```

  # Restrict an MCPServer to specific ids (replaces the scope list).
  diagrid mcpserver update my-mcp --project my-project --scope agent-a --scope agent-b

  # Clear scopes so every id can use the server again.
  diagrid mcpserver update my-mcp --project my-project --clear-scopes

  # Change the endpoint URL and per-call timeout.
  diagrid mcpserver update my-mcp --project my-project --url https://mcp.example.com/mcp --timeout 1m

  # Replace the header list (e.g. update an API key).
  diagrid mcpserver update my-mcp --project my-project --header X-API-Key:new-secret

  # Rotate the OAuth2 client secret (other auth fields are preserved).
  diagrid mcpserver update my-mcp --project my-project --oauth2-client-secret new-secret

```

### Options

```
  -p, --project string                Name of existing project
      --scope stringArray             id scopes (repeatable). Replaces the existing scope list; omit to leave scopes unchanged.
      --clear-scopes                  Remove all scopes so every id can use the server
      --url string                    URL for the MCP server endpoint
      --transport string              Transport type: streamable-http or sse
      --timeout string                Per-call deadline (e.g. 30s, 1m)
      --header stringArray            Headers in Name:Value format (repeatable). Replaces the existing header list.
      --clear-headers                 Remove all headers
      --protocol-version string       MCP protocol version (e.g. "2025-06-18")
      --oauth2-issuer string          OAuth2 token endpoint URL
      --oauth2-audience string        OAuth2 audience
      --oauth2-scope stringArray      OAuth2 scope (repeatable). Replaces the existing OAuth2 scope list.
      --oauth2-client-id string       OAuth2 client identifier sent to the token endpoint
      --oauth2-client-secret string   OAuth2 client secret to rotate to (stored securely via transparent secret management)
      --clear-auth                    Remove all auth (OAuth2/SPIFFE) so the server is called without credentials
      --regenerate-api-token          Regenerate the API token for this MCP server's backing App ID
  -w, --wait                          Wait for long-running resource update to finish
  -h, --help                          help for update
```

### Options inherited from parent commands

```
      --api-key string   Diagrid Cloud API key
```

### SEE ALSO

- [diagrid mcpserver](./mcpserver.md)	 - Manage MCP servers