diff --git a/api/openapi/markdown/console-openapi.md b/api/openapi/markdown/console-openapi.md
index b3a0b8a6a71..43dfd2ec8c9 100644
--- a/api/openapi/markdown/console-openapi.md
+++ b/api/openapi/markdown/console-openapi.md
@@ -4645,6 +4645,25 @@ Refresh MCP server configuration and regenerate server code
 | ---- | ----------- | ------ |
 | 200 | Success | **application/json**: [SimpleResultResponse](#simpleresultresponse)<br> |
 
+### [POST] /auth/plugin/datasource/{provider_id}/visibility
+#### Parameters
+
+| Name | Located in | Description | Required | Schema |
+| ---- | ---------- | ----------- | -------- | ------ |
+| provider_id | path |  | Yes | string |
+
+#### Request Body
+
+| Required | Schema |
+| -------- | ------ |
+|  Yes | **application/json**: [DatasourceCredentialVisibilityPayload](#datasourcecredentialvisibilitypayload)<br> |
+
+#### Responses
+
+| Code | Description | Schema |
+| ---- | ----------- | ------ |
+| 200 | Success | **application/json**: [SimpleResultResponse](#simpleresultresponse)<br> |
+
 ### [GET] /billing/invoices
 #### Responses
 
@@ -15383,6 +15402,7 @@ Model class for provider custom model configuration.
 | ---- | ---- | ----------- | -------- |
 | credentials | object |  | Yes |
 | name | string |  | No |
+| visibility | string | only_me or all_team_members (defaults to all_team) | No |
 
 #### DatasourceCredentialUpdatePayload
 
@@ -15392,6 +15412,14 @@ Model class for provider custom model configuration.
 | credentials | object |  | No |
 | name | string |  | No |
 
+#### DatasourceCredentialVisibilityPayload
+
+| Name | Type | Description | Required |
+| ---- | ---- | ----------- | -------- |
+| credential_id | string |  | Yes |
+| partial_member_list | [ string ] | account ids granted access when visibility is partial_members | No |
+| visibility | string | only_me, all_team_members, or partial_members | Yes |
+
 #### DatasourceCredentialsResponse
 
 | Name | Type | Description | Required |
diff --git a/packages/contracts/generated/api/console/auth/orpc.gen.ts b/packages/contracts/generated/api/console/auth/orpc.gen.ts
index 7acf024d4e4..a33d5e00a6a 100644
--- a/packages/contracts/generated/api/console/auth/orpc.gen.ts
+++ b/packages/contracts/generated/api/console/auth/orpc.gen.ts
@@ -28,6 +28,9 @@ import {
   zPostAuthPluginDatasourceByProviderIdUpdateNameResponse,
   zPostAuthPluginDatasourceByProviderIdUpdatePath,
   zPostAuthPluginDatasourceByProviderIdUpdateResponse,
+  zPostAuthPluginDatasourceByProviderIdVisibilityBody,
+  zPostAuthPluginDatasourceByProviderIdVisibilityPath,
+  zPostAuthPluginDatasourceByProviderIdVisibilityResponse,
 } from './zod.gen'
 
 export const get = oc
@@ -171,6 +174,26 @@ export const updateName = {
   post: post5,
 }
 
+export const post6 = oc
+  .route({
+    inputStructure: 'detailed',
+    method: 'POST',
+    operationId: 'postAuthPluginDatasourceByProviderIdVisibility',
+    path: '/auth/plugin/datasource/{provider_id}/visibility',
+    tags: ['console'],
+  })
+  .input(
+    z.object({
+      body: zPostAuthPluginDatasourceByProviderIdVisibilityBody,
+      params: zPostAuthPluginDatasourceByProviderIdVisibilityPath,
+    }),
+  )
+  .output(zPostAuthPluginDatasourceByProviderIdVisibilityResponse)
+
+export const visibility = {
+  post: post6,
+}
+
 export const get3 = oc
   .route({
     inputStructure: 'detailed',
@@ -182,7 +205,7 @@ export const get3 = oc
   .input(z.object({ params: zGetAuthPluginDatasourceByProviderIdPath }))
   .output(zGetAuthPluginDatasourceByProviderIdResponse)
 
-export const post6 = oc
+export const post7 = oc
   .route({
     inputStructure: 'detailed',
     method: 'POST',
@@ -200,12 +223,13 @@ export const post6 = oc
 
 export const byProviderId = {
   get: get3,
-  post: post6,
+  post: post7,
   customClient,
   default: default_,
   delete: delete2,
   update,
   updateName,
+  visibility,
 }
 
 export const datasource = {
diff --git a/packages/contracts/generated/api/console/auth/types.gen.ts b/packages/contracts/generated/api/console/auth/types.gen.ts
index 99a06128e14..2b97526ff24 100644
--- a/packages/contracts/generated/api/console/auth/types.gen.ts
+++ b/packages/contracts/generated/api/console/auth/types.gen.ts
@@ -13,6 +13,7 @@ export type DatasourceCredentialPayload = {
     [key: string]: unknown
   }
   name?: string | null
+  visibility?: string | null
 }
 
 export type SimpleResultResponse = {
@@ -47,6 +48,12 @@ export type DatasourceUpdateNamePayload = {
   name: string
 }
 
+export type DatasourceCredentialVisibilityPayload = {
+  credential_id: string
+  partial_member_list?: Array<string> | null
+  visibility: string
+}
+
 export type GetAuthPluginDatasourceDefaultListData = {
   body?: never
   path?: never
@@ -202,3 +209,19 @@ export type PostAuthPluginDatasourceByProviderIdUpdateNameResponses = {
 
 export type PostAuthPluginDatasourceByProviderIdUpdateNameResponse
   = PostAuthPluginDatasourceByProviderIdUpdateNameResponses[keyof PostAuthPluginDatasourceByProviderIdUpdateNameResponses]
+
+export type PostAuthPluginDatasourceByProviderIdVisibilityData = {
+  body: DatasourceCredentialVisibilityPayload
+  path: {
+    provider_id: string
+  }
+  query?: never
+  url: '/auth/plugin/datasource/{provider_id}/visibility'
+}
+
+export type PostAuthPluginDatasourceByProviderIdVisibilityResponses = {
+  200: SimpleResultResponse
+}
+
+export type PostAuthPluginDatasourceByProviderIdVisibilityResponse
+  = PostAuthPluginDatasourceByProviderIdVisibilityResponses[keyof PostAuthPluginDatasourceByProviderIdVisibilityResponses]
diff --git a/packages/contracts/generated/api/console/auth/zod.gen.ts b/packages/contracts/generated/api/console/auth/zod.gen.ts
index 3a0d3f38ff4..12fba703e95 100644
--- a/packages/contracts/generated/api/console/auth/zod.gen.ts
+++ b/packages/contracts/generated/api/console/auth/zod.gen.ts
@@ -15,6 +15,7 @@ export const zDatasourceCredentialsResponse = z.object({
 export const zDatasourceCredentialPayload = z.object({
   credentials: z.record(z.string(), z.unknown()),
   name: z.string().max(100).nullish(),
+  visibility: z.string().nullish(),
 })
 
 /**
@@ -63,6 +64,15 @@ export const zDatasourceUpdateNamePayload = z.object({
   name: z.string().max(100),
 })
 
+/**
+ * DatasourceCredentialVisibilityPayload
+ */
+export const zDatasourceCredentialVisibilityPayload = z.object({
+  credential_id: z.string(),
+  partial_member_list: z.array(z.string()).nullish(),
+  visibility: z.string(),
+})
+
 /**
  * Success
  */
@@ -156,3 +166,15 @@ export const zPostAuthPluginDatasourceByProviderIdUpdateNamePath = z.object({
  * Success
  */
 export const zPostAuthPluginDatasourceByProviderIdUpdateNameResponse = zSimpleResultResponse
+
+export const zPostAuthPluginDatasourceByProviderIdVisibilityBody
+  = zDatasourceCredentialVisibilityPayload
+
+export const zPostAuthPluginDatasourceByProviderIdVisibilityPath = z.object({
+  provider_id: z.string(),
+})
+
+/**
+ * Success
+ */
+export const zPostAuthPluginDatasourceByProviderIdVisibilityResponse = zSimpleResultResponse