privy providers update

Configure builtin OAuth credentials/options; does not silently enable login.

Usage

privy providers update [options] <provider>

Arguments

Argument	Description
provider	—

Options

Option	Description
--dry-run	Validate and print the API request without network access or credentials.
--yes	Confirm this mutation or export.
--body <json>	JSON body, or - to read stdin.
--file <path>	JSON body file, or - to read stdin.
--client-id <string>	Provider client ID. Configure together with client_secret.
--scopes <json>	Replace configured additional scopes; does not silently widen them.
--return-oauth-tokens <boolean>	Return provider tokens to the app after user authorization; does not fetch tokens now.
--apple <object>	Apple-specific key metadata; client_secret contains the signing-key material. No signatures performed by CLI.
--diff	Read live state and show changes WITHOUT writing (requires login).
--allow-production	Explicitly allow this production mutation; also requires --yes.

Global options such as --app, --account and --profile also apply. See the command reference overview.

Examples

privy providers update google --scopes "[]" --diff
privy providers update google --body - --yes < /dev/stdin

Behavior

• Changes data: yes. Preview with --dry-run, then run with --yes and any required confirmations.
• Scope: app
• Before it runs: Selected app/environment and current configuration; editability/feature/provider-specific guards.
• Production apps: Requires --allow-production and --yes.
• Verification: Fresh public configuration; masked or omitted secret values and real external login are not verified.
• Retries: None.

Related guides

• Login methods
• Credentials and secrets

Inspect the full contract locally with privy schema providers update.