> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orgo.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Update public URL

> Change the port, or set or remove a password.

Send `port`, `password`, or both. `"password": null` removes the password. Changes are live within 5 seconds.

With a password, a browser sees a password form first. Any other request without the form's cookie, such as an API call or a webhook, gets `401`. A program that needs in can read the cookie from [Get public URL password](https://docs.orgo.ai/api-reference/public-urls/password.md).

Setting a new password signs out everyone who entered the old one.


## OpenAPI

````yaml PATCH /computers/{id}/public-urls/{urlId}
openapi: 3.1.0
info:
  title: Orgo API
  description: >-
    Launch cloud computers that AI agents can control and interact with. Create
    workspaces, provision computers, and control them programmatically.
  version: 2.0.0
  contact:
    name: Orgo Support
    email: contact@orgo.ai
    url: https://orgo.ai
servers:
  - url: https://www.orgo.ai/api
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Support
    description: >-
      Orgo’s support agent, for programs: ask how to do something in Orgo and
      get an answer with full URLs and copyable commands.
  - name: Account
    description: >-
      Account capacity: how many computers an account may run, and adding or
      giving back more.
  - name: Agent accounts
    description: >-
      Accounts an AI agent makes for itself, and the claim link a person uses to
      take one over.
  - name: Clients
    description: >-
      Run Orgo for your clients from your own app: a workspace and scoped key
      each, billed to you or to them.
  - name: Workspaces
    description: Organize computers into named workspaces
  - name: Computers
    description: Provision and manage virtual computers
  - name: Public URLs
    description: Share an app running on a computer at an https address on orgo.dev.
  - name: Computer Lifecycle
    description: Start, stop, and restart computers
  - name: Computer Actions
    description: Control mouse, keyboard, and execute commands
  - name: Screens
    description: >-
      More than one desktop on a single computer. Each screen is its own X
      server with its own cursor and window manager, so an agent working on one
      cannot disturb another.
  - name: Files
    description: Upload and download files
  - name: Templates
    description: Author, build, and launch reproducible computers from templates
  - name: Chat
    description: Run an agent on a computer through OpenAI-compatible chat completions.
  - name: Workflows
    description: >-
      Routines that run the same way every time: a start, then steps. Make them
      from plain words or lines, check them, run them and follow their runs (in
      preview).
paths:
  /computers/{id}/public-urls/{urlId}:
    patch:
      tags:
        - Public URLs
      summary: Update public URL
      description: >-
        Points the URL at another port, sets a password, or removes it. With a
        password, a browser sees a password form first, and any other request
        without the form's cookie (API calls, WebSockets, webhooks) gets `401`.
        A new password signs everyone out. Changes are live within 5 seconds.
        Needs the **Computers** write permission.
      operationId: updatePublicUrl
      parameters:
        - name: id
          in: path
          required: true
          description: Computer ID. Accepts the computer's UUID or its `instance_id`.
          schema:
            type: string
        - name: urlId
          in: path
          required: true
          description: >-
            The public URL's `id`, from [List public
            URLs](/api-reference/public-urls/list).
          schema:
            type: string
            format: uuid
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdatePublicUrlRequest'
            examples:
              port:
                summary: Serve another port
                value:
                  port: 8000
              password:
                summary: Set a password
                value:
                  password: k7Rm2qX
              open:
                summary: Remove the password
                value:
                  password: null
      responses:
        '200':
          description: Updated. The answer never includes the password, only `protected`.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicUrl'
              example:
                id: 6f1c2a7e-3b9d-4c1a-9e2f-0a1b2c3d4e5f
                url: https://cool-thing-x7k2.orgo.dev
                hostname: cool-thing-x7k2.orgo.dev
                label: cool-thing-x7k2
                port: 3000
                created_at: '2026-10-05T18:00:00.000Z'
                protected: true
        '400':
          description: >-
            `INVALID_PORT`, `INVALID_PASSWORD`, or `NOTHING_TO_CHANGE` (neither
            `port` nor `password` sent). Nothing changed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Missing or invalid API key.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: No access to this computer, or view-only access.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found on this computer, or public URLs are off for your account.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '409':
          description: >-
            `PORT_TAKEN`: another of the computer's URLs serves this port,
            returned in `public_url`. `PUBLIC_URL_DISABLED`: Orgo support turned
            this URL off.
          content:
            application/json:
              schema:
                allOf:
                  - $ref: '#/components/schemas/Error'
                  - type: object
                    properties:
                      public_url:
                        $ref: '#/components/schemas/PublicUrl'
        '503':
          description: >-
            `PASSWORD_UNAVAILABLE`: passwords are not available yet. Nothing
            changed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    UpdatePublicUrlRequest:
      type: object
      minProperties: 1
      description: Send `port`, `password`, or both.
      properties:
        port:
          type: integer
          minimum: 1
          maximum: 65535
          description: Serve another port on the computer.
        password:
          type:
            - string
            - 'null'
          minLength: 4
          maxLength: 64
          description: >-
            4 to 64 printable ASCII characters, case sensitive, no space at the
            start or end. `null` removes the password.
    PublicUrl:
      type: object
      required:
        - id
        - url
        - hostname
        - label
        - port
        - created_at
        - protected
      properties:
        id:
          type: string
          format: uuid
        url:
          type: string
          format: uri
          description: The address to share.
          example: https://cool-thing-x7k2.orgo.dev
        hostname:
          type: string
          example: cool-thing-x7k2.orgo.dev
        label:
          type: string
          description: The part of the hostname before the base domain.
          example: cool-thing-x7k2
        port:
          type: integer
          minimum: 1
          maximum: 65535
          description: The port on the computer the URL serves.
        created_at:
          type: string
          format: date-time
        protected:
          type: boolean
          description: '`true` when visitors must enter a password first.'
        disabled:
          type: boolean
          description: >-
            Present and `true` only when Orgo support turned the URL off. It is
            not served and cannot be changed or removed.
    Error:
      type: object
      description: >-
        The base error body. Every failure carries `error`; individual endpoints
        add the fields named in the schemas below.
      required:
        - error
      properties:
        error:
          type: string
          description: Human-readable message.
          example: Access denied
        code:
          type: string
          description: >-
            Machine-readable reason. Present on the failures that define one,
            absent otherwise.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: API key authentication. Get your key at orgo.ai/workspaces

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.