Update account settings
curl --request PUT \
--url https://my.server.express/api/v1/user/settings \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"firstName": "<string>",
"lastName": "<string>",
"addressLine1": "<string>",
"addressLine2": "<string>",
"city": "<string>",
"postcode": "<string>",
"phoneNumber": "<string>",
"companyName": "<string>",
"country": "<string>",
"region": "<string>",
"vatNumber": "<string>"
}
'const options = {
method: 'PUT',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
firstName: '<string>',
lastName: '<string>',
addressLine1: '<string>',
addressLine2: '<string>',
city: '<string>',
postcode: '<string>',
phoneNumber: '<string>',
companyName: '<string>',
country: '<string>',
region: '<string>',
vatNumber: '<string>'
})
};
fetch('https://my.server.express/api/v1/user/settings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://my.server.express/api/v1/user/settings"
payload = {
"firstName": "<string>",
"lastName": "<string>",
"addressLine1": "<string>",
"addressLine2": "<string>",
"city": "<string>",
"postcode": "<string>",
"phoneNumber": "<string>",
"companyName": "<string>",
"country": "<string>",
"region": "<string>",
"vatNumber": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.put(url, json=payload, headers=headers)
print(response.text){
"success": true,
"data": {
"message": "<string>"
}
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}Account
Update account settings
Allow-listed partial update; unknown keys are dropped. Text fields are trimmed (max 255) and null/"" clears them.
Sending vatNumber triggers a VIES lookup that sets vatValid server-side. A US, CA or AU country requires region.
Writes an UPDATE_USER_SETTINGS audit entry listing the changed field names. Session only — API tokens are rejected
(Uncertain: an in-code comment says API tokens can reach it, but the route uses verifyAuth, which refuses them).
PUT
/
v1
/
user
/
settings
Update account settings
curl --request PUT \
--url https://my.server.express/api/v1/user/settings \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"firstName": "<string>",
"lastName": "<string>",
"addressLine1": "<string>",
"addressLine2": "<string>",
"city": "<string>",
"postcode": "<string>",
"phoneNumber": "<string>",
"companyName": "<string>",
"country": "<string>",
"region": "<string>",
"vatNumber": "<string>"
}
'const options = {
method: 'PUT',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
firstName: '<string>',
lastName: '<string>',
addressLine1: '<string>',
addressLine2: '<string>',
city: '<string>',
postcode: '<string>',
phoneNumber: '<string>',
companyName: '<string>',
country: '<string>',
region: '<string>',
vatNumber: '<string>'
})
};
fetch('https://my.server.express/api/v1/user/settings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://my.server.express/api/v1/user/settings"
payload = {
"firstName": "<string>",
"lastName": "<string>",
"addressLine1": "<string>",
"addressLine2": "<string>",
"city": "<string>",
"postcode": "<string>",
"phoneNumber": "<string>",
"companyName": "<string>",
"country": "<string>",
"region": "<string>",
"vatNumber": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.put(url, json=payload, headers=headers)
print(response.text){
"success": true,
"data": {
"message": "<string>"
}
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}{
"success": false,
"error": "<string>"
}Authorizations
Session access token (JWT) from POST /v1/auth/login or /v1/auth/refresh. A session satisfies every API scope.
Body
application/json
Ignored if blank.
Maximum string length:
100Ignored if blank.
Maximum string length:
100Maximum string length:
255Maximum string length:
255Maximum string length:
255Maximum string length:
255Maximum string length:
255Maximum string length:
255ISO 3166-1 alpha-2; uppercased.
Pattern:
^[A-Za-z]{2}$State/province. Required when country is US, CA or AU.
Maximum string length:
64Null or "" follows the default.
Available options:
GBP, USD, EUR, , null Empty string clears it.
Maximum string length:
64