> ## Documentation Index > Fetch the complete documentation index at: https://runcrate.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. # Change a firewall rule > Fields left out stay as they are; `sources` replaces the list. Running instances apply it within about a minute. ## OpenAPI ````yaml /api-reference/openapi.json patch /environments/{id}/firewall/{ruleId} openapi: 3.1.0 info: title: Runcrate API version: 1.0.0 summary: OpenAI-compatible inference API + GPU infrastructure API. description: >- Runcrate exposes two API surfaces. The inference API at `https://api.runcrate.ai/v1` is OpenAI-compatible: it accepts the standard OpenAI SDK with the base URL changed. The infrastructure API at `https://www.runcrate.ai/api/v1` manages GPU instances, jobs, persistent volumes, environments, SSH keys, templates, and billing. Both share a single `rc_live_*` API key. Pricing is per-token, per-image, per-second, or per-minute on the inference API (varies by model; see https://www.runcrate.ai/api/models/catalog for live rates) and per-second on GPU rentals (see https://www.runcrate.ai/pricing for hourly rates per GPU class). All infrastructure API responses are wrapped in `{ "data": ... }`. List responses also include a `meta` object with pagination cursors. Error responses use `{ "error": { "code": "...", "message": "..." } }`. termsOfService: https://www.runcrate.ai/terms contact: name: Runcrate url: https://www.runcrate.ai/contact license: name: Proprietary url: https://www.runcrate.ai/terms servers: - url: https://api.runcrate.ai/v1 description: Inference API (OpenAI-compatible) - url: https://www.runcrate.ai/api/v1 description: >- Infrastructure API (instances, jobs, storage, environments, ssh-keys, templates, billing) security: - ApiKeyAuth: [] tags: - name: Chat description: OpenAI-compatible chat completions. - name: Images description: Text-to-image generation. - name: Videos description: Async text-to-video and image-to-video generation. - name: Audio description: Text-to-speech and speech-to-text. - name: Embeddings description: Vector embeddings for RAG and search. - name: Models description: Model catalog discovery. - name: Instances description: GPU instance lifecycle. - name: Jobs description: >- Run one command on its own GPU machine. The machine stops, and billing ends, when the command exits. - name: Schedules description: >- Start an instance or a job later: once at a set time, or on a repeating cron schedule in your timezone. - name: Storage description: Persistent volume management. - name: Environments description: Resource isolation containers within a workspace. - name: Secrets description: >- Names of the secrets an environment's machines get. Values are set in the dashboard and never returned. - name: SSH Keys description: SSH key management for instance access. - name: Templates description: Pre-built instance images and configurations. - name: Billing description: Credit balance, transactions, usage metrics. paths: /environments/{id}/firewall/{ruleId}: servers: - url: https://www.runcrate.ai/api/v1 patch: tags: - Environments summary: Change a firewall rule description: >- Fields left out stay as they are; `sources` replaces the list. Running instances apply it within about a minute. operationId: updateFirewallRule parameters: - name: id in: path required: true description: Environment ID, or `current` for the environment the request acts in schema: type: string - name: ruleId in: path required: true schema: type: string format: uuid requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/FirewallRuleUpdateRequest' responses: '200': description: Rule updated. content: application/json: schema: type: object required: - data properties: data: $ref: '#/components/schemas/FirewallRule' '401': $ref: '#/components/responses/Unauthorized' '403': description: >- `forbidden`: only workspace owners and admins can change the firewall. content: application/json: schema: $ref: '#/components/schemas/Error' '404': $ref: '#/components/responses/NotFound' '422': description: >- `validation_error`: an invalid port or source, or `https` (HTTPS links are set on each instance). content: application/json: schema: $ref: '#/components/schemas/Error' components: schemas: FirewallRuleUpdateRequest: type: object description: >- Fields left out stay as they are; `sources` replaces the list. A new `port_from` without `port_to` makes a single port. properties: protocol: type: string enum: - tcp - udp port_from: type: integer minimum: 1 maximum: 65535 port_to: type: integer minimum: 1 maximum: 65535 description: End of a range; defaults to `port_from`. sources: type: array minItems: 1 maxItems: 20 items: type: string description: >- IP addresses and CIDR ranges, IPv4 or IPv6, or `anywhere`. Stored normalised: a single address becomes /32 or /128; anywhere is `["0.0.0.0/0", "::/0"]`. description: type: string nullable: true maxLength: 100 FirewallRule: type: object required: - id - protocol - port_from - port_to - sources - description - created_at - updated_at properties: id: type: string format: uuid protocol: type: string enum: - tcp - udp port_from: type: integer minimum: 1 maximum: 65535 port_to: type: integer minimum: 1 maximum: 65535 description: End of a range; defaults to `port_from`. sources: type: array minItems: 1 maxItems: 20 items: type: string description: >- IP addresses and CIDR ranges, IPv4 or IPv6, or `anywhere`. Stored normalised: a single address becomes /32 or /128; anywhere is `["0.0.0.0/0", "::/0"]`. description: type: string nullable: true maxLength: 100 created_at: type: string format: date-time updated_at: type: string format: date-time Error: type: object required: - error properties: error: type: object required: - code - message properties: code: type: string description: >- Machine-readable error code (e.g. `validation_error`, `unauthorized`, `not_found`, `insufficient_credits`, `rate_limited`, `internal_error`). message: type: string description: Human-readable error message. details: type: object additionalProperties: true description: Optional structured error context. responses: Unauthorized: description: Missing or invalid API key. content: application/json: schema: $ref: '#/components/schemas/Error' NotFound: description: Resource not found. content: application/json: schema: $ref: '#/components/schemas/Error' securitySchemes: ApiKeyAuth: type: http scheme: bearer description: >- Use a Runcrate API key with the `rc_live_*` prefix as the bearer token. Create one at https://www.runcrate.ai/dashboard/api-keys. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.