jbeckwith-oai · Oct 10, 2026 · Oct 10, 2026
@@ -1,8 +1,8 @@
 schema_version: 1
-generation_id: 3e2fc8c2-fc65-4de2-a2b9-bec2db32b47a
-openapi_spec_hash: 811d22eab6faaaebaefd09822ff5fcd5
-openapi_transformed_spec_hash: 1b1356487f58dfe5ebffc4ecf810fe67
-config_hash: dd5d37ab21844cf4e91a2f181042a9c1
-codegen_sha: 3e69da1e89f9c8dba79a1e89b5eee854c367c365
-codegen_hash: 8e13732884f060400d8ade6a50794e3417284f9ff59cad63d6e4344bd6e39111
-public_codegen_sha: e66a3728106c7a8de04671d012d4fbd57fe226ba
+generation_id: b3da0c4c-df51-49c0-b02c-ad0fe10c1b6f
+openapi_spec_hash: 0dc9df0e70c6c0da3e20d5c21ddccce5
+openapi_transformed_spec_hash: c76e5334b568979c4d2b61a8cba698b1
+config_hash: 687b8a0f9aff551a4cbf86b2ac82c288
+codegen_sha: 3eb8e05c668b307f23266d5d43a5951c550b9dad
+codegen_hash: a20c95cfd77f2fd367f5a3169a40c499ff59b0c91fee0d3f74c690ea27ce7b34
+public_codegen_sha: 659fdbf27d60091b6c4f12415a3ad9dc0478d4d4
@@ -688,6 +688,7 @@ Methods:
 
 - <code title="post /vaults">client.beta.agents.vaults.<a href="./src/openai/resources/beta/agents/vaults/vaults.py">create</a>(\*\*<a href="src/openai/types/beta/agents/vault_create_params.py">params</a>) -> <a href="./src/openai/types/beta/agents/vault.py">Vault</a></code>
 - <code title="get /vaults/{vault_id}">client.beta.agents.vaults.<a href="./src/openai/resources/beta/agents/vaults/vaults.py">retrieve</a>(vault_id) -> <a href="./src/openai/types/beta/agents/vault.py">Vault</a></code>
+- <code title="post /vaults/{vault_id}">client.beta.agents.vaults.<a href="./src/openai/resources/beta/agents/vaults/vaults.py">update</a>(vault_id, \*\*<a href="src/openai/types/beta/agents/vault_update_params.py">params</a>) -> <a href="./src/openai/types/beta/agents/vault.py">Vault</a></code>
 - <code title="get /vaults">client.beta.agents.vaults.<a href="./src/openai/resources/beta/agents/vaults/vaults.py">list</a>(\*\*<a href="src/openai/types/beta/agents/vault_list_params.py">params</a>) -> <a href="./src/openai/types/beta/agents/vault.py">SyncCursorPage[Vault]</a></code>
 - <code title="delete /vaults/{vault_id}">client.beta.agents.vaults.<a href="./src/openai/resources/beta/agents/vaults/vaults.py">delete</a>(vault_id) -> <a href="./src/openai/types/beta/agents/vault_deleted.py">VaultDeleted</a></code>
 

@@ -33246,6 +33246,24 @@ paths:
           minLength: 0
           maxLength: 1048576
         description: Return resources after this resource ID in the selected order.
+      - name: metadata
+        in: query
+        required: false
+        schema:
+          type: object
+          additionalProperties:
+            type: string
+            minLength: 0
+            maxLength: 512
+          propertyNames:
+            type: string
+            minLength: 1
+            maxLength: 64
+          minProperties: 0
+          maxProperties: 16
+        description: Exact string matches supplied as `metadata[key]=value`. All supplied pairs must match. Up to 16 pairs, with keys from 1 to 64 characters and values up to 512 characters. Filtering is eventually consistent; metadata changes may take time to appear.
+        style: deepObject
+        explode: true
       responses:
         '200':
           description: A page of vaults.
@@ -33485,6 +33503,78 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/ErrorResponse-2'
+    post:
+      operationId: updateVault
+      summary: Update a vault
+      description: Updates the name or metadata of an active vault. Omitted fields remain unchanged. See [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+      tags:
+      - Vaults
+      parameters:
+      - name: vault_id
+        in: path
+        required: true
+        schema:
+          type: string
+          minLength: 0
+          maxLength: 1048576
+        description: The ID of the vault.
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/UpdateVaultParams'
+            example:
+              name: Research vault
+        required: true
+      responses:
+        '200':
+          description: The updated vault.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/VaultResource'
+        '400':
+          description: The request was invalid.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
+        '401':
+          description: Authentication or project context was missing.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
+        '403':
+          description: The API key lacks the required management permission.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
+        '404':
+          description: The requested vault or credential was not found.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
+        '409':
+          description: The request conflicted with the current vault state.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
+        '500':
+          description: An internal error occurred.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
+        '503':
+          description: The service is temporarily unavailable.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse-2'
   /vaults/{vault_id}/credentials:
     get:
       operationId: listVaultCredentials
@@ -33532,6 +33622,24 @@ paths:
           minLength: 0
           maxLength: 1048576
         description: Return resources after this resource ID in the selected order.
+      - name: metadata
+        in: query
+        required: false
+        schema:
+          type: object
+          additionalProperties:
+            type: string
+            minLength: 0
+            maxLength: 512
+          propertyNames:
+            type: string
+            minLength: 1
+            maxLength: 64
+          minProperties: 0
+          maxProperties: 16
+        description: Exact string matches supplied as `metadata[key]=value`. All supplied pairs must match. Up to 16 pairs, with keys from 1 to 64 characters and values up to 512 characters. Filtering is eventually consistent; metadata changes may take time to appear.
+        style: deepObject
+        explode: true
       responses:
         '200':
           description: A page of vault credentials.
@@ -105022,6 +105130,31 @@ components:
             "type": "agent.environment.suspended",
             "data": {"id": "ccarenv_123"}
           }
+    UpdateVaultParams:
+      type: object
+      properties:
+        metadata:
+          type: object
+          additionalProperties:
+            type: string
+            minLength: 0
+            maxLength: 512
+          propertyNames:
+            type: string
+            minLength: 1
+            maxLength: 64
+          minProperties: 0
+          maxProperties: 16
+          description: Replaces all metadata. Omit to leave unchanged, or pass {} to clear it. Up to 16 string key-value pairs, with keys up to 64 and values up to 512 characters.
+        name:
+          type:
+          - string
+          - 'null'
+          minLength: 1
+          maxLength: 1048576
+          description: A replacement name. Omit to leave unchanged, or pass null to clear it. The name is trimmed before storage. It must contain 1 to 256 UTF-8 bytes after trimming.
+      additionalProperties: false
+      description: Fields to replace on an active vault.
     OAuthErrorCode:
       anyOf:
       - enum:

@@ -112,10 +112,9 @@ def _stringify_item(
                     f"Unknown array_format value: {array_format}, choose from {', '.join(get_args(ArrayFormat))}"
                 )
 
-        serialised = self._primitive_value_to_str(value)
-        if not serialised:
+        if value is None:
             return []
-        return [(key, serialised)]
+        return [(key, self._primitive_value_to_str(value))]
 
     def _primitive_value_to_str(self, value: PrimitiveData) -> str:
         # copied from httpx

@@ -219,6 +219,7 @@ def list(
         *,
         after: str | Omit = omit,
         limit: Optional[int] | Omit = omit,
+        metadata: Dict[str, str] | Omit = omit,
         order: Literal["asc", "desc"] | Omit = omit,
         status: VaultStatusFilterParam | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -239,6 +240,11 @@ def list(
           limit: The maximum number of resources to return. Defaults to 20. Values are clamped
               between 1 and 100.
 
+          metadata: Exact string matches supplied as `metadata[key]=value`. All supplied pairs must
+              match. Up to 16 pairs, with keys from 1 to 64 characters and values up to 512
+              characters. Filtering is eventually consistent; metadata changes may take time
+              to appear.
+
           order: Sort order by the `created_at` timestamp. Use `asc` for ascending order or
               `desc` for descending order. Defaults to `desc`.
 
@@ -271,6 +277,7 @@ def list(
                     {
                         "after": after,
                         "limit": limit,
+                        "metadata": metadata,
                         "order": order,
                         "status": status,
                     },
@@ -517,6 +524,7 @@ def list(
         *,
         after: str | Omit = omit,
         limit: Optional[int] | Omit = omit,
+        metadata: Dict[str, str] | Omit = omit,
         order: Literal["asc", "desc"] | Omit = omit,
         status: VaultStatusFilterParam | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -537,6 +545,11 @@ def list(
           limit: The maximum number of resources to return. Defaults to 20. Values are clamped
               between 1 and 100.
 
+          metadata: Exact string matches supplied as `metadata[key]=value`. All supplied pairs must
+              match. Up to 16 pairs, with keys from 1 to 64 characters and values up to 512
+              characters. Filtering is eventually consistent; metadata changes may take time
+              to appear.
+
           order: Sort order by the `created_at` timestamp. Use `asc` for ascending order or
               `desc` for descending order. Defaults to `desc`.
 
@@ -569,6 +582,7 @@ def list(
                     {
                         "after": after,
                         "limit": limit,
+                        "metadata": metadata,
                         "order": order,
                         "status": status,
                     },