Skip to main content
Update Company Configurations API

Authentication

All requests require an API key in the request headers. Headers:

Request

Content-Type: application/json Update one or more settings by sending their key and new value. The available keys, their input type, and the allowed options are returned by the Company Configurations API.

Body Parameters

Value Format

The value must be an object whose inner value field matches the setting type:

Code Examples

Success Response

HTTP Status: 200 OK Valid settings are applied even if some entries in the request fail validation. Settings that fail validation are skipped and reported in misConfigurations — always inspect this array to confirm every setting was applied. Response Fields:

Response Example

Response Example (with a skipped setting)

Error Responses

Setting Not Editable / Update Rejected

When a requested setting is read-only, or a value-specific rule fails (for example, an invalid active-currency change), the update is rejected as a whole. This is returned with an HTTP 200 OK status, ok: false, and an errorData object — no settings are updated in this case. HTTP Status: 200 OK

Validation Error

Returned when the request body is malformed — for example, settings is missing or empty, or an item is missing key or value. HTTP Status: 400 Bad Request

Access Denied

HTTP Status: 403 Forbidden

Authentication Errors

HTTP Status: 401 Unauthorized

Permission Errors

HTTP Status: 403 Forbidden

Internal Error

HTTP Status: 500 Internal Server Error

Best Practices

  • Always wrap the new value in an object: { "value": <newValue> } — sending a bare value will fail validation
  • Fetch the Company Configurations API first to get valid key values, the expected type, and the allowed options
  • Check data.context.misConfigurations after each call — valid settings are still applied even when other entries are skipped, so a 200 OK with ok: true does not guarantee every setting changed
  • Treat a 200 OK response with ok: false and an errorData object as a full rejection — no settings were updated
  • Access is limited to users with organization update permission and an admin or bookkeeper role