Update an account

PUThttps://app.shuttleglobal.com/c/api/instances/{instance_key}/accounts/{account_id}

Language

Credentials

Secret key

Instance keyRemember on this device

Kept in this browser tab unless you tick Remember; don't on a shared computer. Use keys from a sandbox account to test without moving money.

Parameters

Path

account_idrequired

Body application/json

cURL request

curl --request PUT \
  --url https://app.shuttleglobal.com/c/api/instances/YOUR_INSTANCE_KEY/accounts/ACCOUNT_ID \
  --header 'Authorization: Basic <base64 of SECRET_KEY:>' \
  --header 'Content-Type: application/json' \
  --data '{
  "account": {}
}'

const url = 'https://app.shuttleglobal.com/c/api/instances/YOUR_INSTANCE_KEY/accounts/ACCOUNT_ID';
const options = {
  method: 'PUT',
  headers: {
    Authorization: 'Basic <base64 of SECRET_KEY:>',
    'Content-Type': 'application/json'
  },
  body: '{"account":{}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

import requests

url = "https://app.shuttleglobal.com/c/api/instances/YOUR_INSTANCE_KEY/accounts/ACCOUNT_ID"

payload = { "account": {} }
headers = {
    "Authorization": "Basic <base64 of SECRET_KEY:>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.json())

<?php

$client = new \GuzzleHttp\Client();

$response = $client->request('PUT', 'https://app.shuttleglobal.com/c/api/instances/YOUR_INSTANCE_KEY/accounts/ACCOUNT_ID', [
  'body' => '{
  "account": {}
}',
  'headers' => [
    'Authorization' => 'Basic <base64 of SECRET_KEY:>',
    'Content-Type' => 'application/json',
  ],
]);

echo $response->getBody();

require 'uri'
require 'net/http'

url = URI("https://app.shuttleglobal.com/c/api/instances/YOUR_INSTANCE_KEY/accounts/ACCOUNT_ID")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Basic <base64 of SECRET_KEY:>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account\": {}\n}"

response = http.request(request)
puts response.read_body

package main

import (
  "fmt"
  "strings"
  "net/http"
  "io"
)

func main() {

  url := "https://app.shuttleglobal.com/c/api/instances/YOUR_INSTANCE_KEY/accounts/ACCOUNT_ID"

  payload := strings.NewReader("{\n  \"account\": {}\n}")

  req, _ := http.NewRequest("PUT", url, payload)

  req.Header.Add("Authorization", "Basic <base64 of SECRET_KEY:>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

curl --request PUT \
  --url https://app.shuttleglobal.com/c/api/accounts/ACCOUNT_ID \
  --header 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{
  "account": {}
}'

const url = 'https://app.shuttleglobal.com/c/api/accounts/ACCOUNT_ID';
const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer YOUR_ACCESS_TOKEN', 'Content-Type': 'application/json'},
  body: '{"account":{}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

import requests

url = "https://app.shuttleglobal.com/c/api/accounts/ACCOUNT_ID"

payload = { "account": {} }
headers = {
    "Authorization": "Bearer YOUR_ACCESS_TOKEN",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.json())

<?php

$client = new \GuzzleHttp\Client();

$response = $client->request('PUT', 'https://app.shuttleglobal.com/c/api/accounts/ACCOUNT_ID', [
  'body' => '{
  "account": {}
}',
  'headers' => [
    'Authorization' => 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type' => 'application/json',
  ],
]);

echo $response->getBody();

require 'uri'
require 'net/http'

url = URI("https://app.shuttleglobal.com/c/api/accounts/ACCOUNT_ID")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer YOUR_ACCESS_TOKEN'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account\": {}\n}"

response = http.request(request)
puts response.read_body

package main

import (
  "fmt"
  "strings"
  "net/http"
  "io"
)

func main() {

  url := "https://app.shuttleglobal.com/c/api/accounts/ACCOUNT_ID"

  payload := strings.NewReader("{\n  \"account\": {}\n}")

  req, _ := http.NewRequest("PUT", url, payload)

  req.Header.Add("Authorization", "Bearer YOUR_ACCESS_TOKEN")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

Response

Updated account

{
  "account": {
    "address": {
      "country": "string",
      "line1": "string",
      "line2": "string",
      "line3": "string",
      "line4": "string",
      "line5": "string",
      "line6": "string"
    },
    "bolton_values": {},
    "channels": [
      "string"
    ],
    "code": "string",
    "company": "string",
    "created": "2026-01-01T12:00:00Z",
    "created_session": "string",
    "crm": "string",
    "crm_key": "string",
    "disconnected_account": true,
    "divisions": [
      "string"
    ],
    "email": "string",
    "first_name": "string",
    "full_address": "string",
    "giftaid_ineligible": true,
    "id": "string",
    "initiatives": [
      "string"
    ],
    "last_name": "string",
    "last_transacted": "2026-01-01T12:00:00Z",
    "last_transaction": "string",
    "locale": "string",
    "metadata": {},
    "name": "string",
    "phone": "string",
    "status": "ACTIVE",
    "tags": "string",
    "timezone": "string",
    "updated": "2026-01-01T12:00:00Z",
    "updated_session": "string",
    "v": 0
  }
}

PUT

/accounts/{account_id}

Update an existing account’s details. You can address the account by its ID or crm_key.

Authorizations

basicAuth
bearerAuth

Parameters

Path Parameters

account_id

required

string

The account’s ID (acc_...), or its crm_key. If more than one account has that crm_key, the most recently updated one is used.

Request Body^required

application/json

object

account

required

object

address

object

Address fields. All fields are optional and any values are accepted to prevent interrupting payments due to address validation issues. Field behavior:

When updating an address, the entire address object is replaced with the new values
To clear/null out all address fields, set each field to an empty string Client applications can implement their own validation if needed.

object

country

string

Country code (any format accepted). Set to empty string to clear.

line1

string

First line of the address. Set to empty string to clear.

line2

string

Second line of the address. Set to empty string to clear.

line3

string

Third line of the address. Set to empty string to clear.

line4

string

City/Town. Set to empty string to clear.

line5

string

Postcode/ZIP. Set to empty string to clear.

line6

string

State/Region. Set to empty string to clear.

company

string

Company name

email

string

Email address. Invalid addresses are accepted to prevent interrupting payments due to email validation issues. Client applications can implement their own validation if needed.

first_name

string

First name of the account holder

last_name

string

Last name of the account holder

locale

string

Locale of the user

metadata

object

Custom key-value pairs stored on the account

object

key

additional properties

string

phone

string

Phone number. Any format is accepted to prevent interrupting payments due to phone validation issues. Client applications can implement their own validation if needed.

tags

string

CSV of tags/references for searching

timezone

string

Timezone in IANA format

Responses

200

Updated account

application/json

object

account

object

A customer account object. Contains all information about a customer including their contact details, status, and metadata.

IMPORTANT: The bolton_values field is managed internally by the system and should not be modified or referenced directly in tests or integrations. Always use the standard top-level fields (company, email, phone, etc.) when creating, updating, or querying accounts.

object

address

object

Address fields. All fields are optional and any values are accepted to prevent interrupting payments due to address validation issues. Field behavior:

When updating an address, the entire address object is replaced with the new values
To clear/null out all address fields, set each field to an empty string Client applications can implement their own validation if needed.

object

country

string

Country code (any format accepted). Set to empty string to clear.

line1

string

First line of the address. Set to empty string to clear.

line2

string

Second line of the address. Set to empty string to clear.

line3

string

Third line of the address. Set to empty string to clear.

line4

string

City/Town. Set to empty string to clear.

line5

string

Postcode/ZIP. Set to empty string to clear.

line6

string

State/Region. Set to empty string to clear.

bolton_values

object

Enterprise Feature: Internal system values. This field is only relevant for enterprise customers and should be ignored by other users.

object

key

additional properties

any

channels

Array<string>

List of channels that have permission to see this account. When an account makes a payment against a channel, they are automatically added to that channel.

code

string

Account code

company

string

Company name

created

string · date-time

Account creation timestamp

created_session

string

Session ID when the account was created

Pattern /^ses_[0-9]+_[0-9]+$/

crm

string

Enterprise Feature: The CRM system identifier. This field is only relevant for enterprise customers and should be ignored by other users.

crm_key

string

Your identifier for the account

disconnected_account

boolean

Enterprise Feature: Indicates if this account is disconnected from the enterprise CRM system. This field is only relevant for enterprise customers and should be ignored by other users.

divisions

Array<string>

List of divisions that have permission to see this account. A division can be added to this list directly via the API, or is automatically added when an account makes a payment against either (1) a channel that belongs to the division or (2) an initiative that belongs to the division.

email

string

Email address. Invalid addresses are accepted to prevent interrupting payments due to email validation issues. Client applications can implement their own validation if needed.

first_name

string

First name of the account holder

full_address

string

Formatted full address

giftaid_ineligible

boolean

Indicates the account is excluded from Gift Aid eligibility (GB donations)

string

Unique identifier for the account

Pattern /^acc_[0-9]+_[0-9]+$/

initiatives

Array<string>

List of initiatives that this account has performed payments against. When an account makes a payment against an initiative, it is automatically added to this list.

last_name

string

Last name of the account holder

last_transacted

string · date-time

Timestamp of last transaction

last_transaction

string

ID of last transaction

locale

string

Locale of the user

metadata

object

Custom key-value pairs stored on the account

object

key

additional properties

string

name

string

Full name of the account holder

phone

string

Phone number. Any format is accepted to prevent interrupting payments due to phone validation issues. Client applications can implement their own validation if needed.

status

string · enum

Account status

Allowed values: ACTIVE TEMP

tags

string

CSV of tags/references

timezone

string

Timezone in IANA format

updated

string · date-time

Last update timestamp

updated_session

string

Session ID when the account was last updated

Pattern /^ses_[0-9]+_[0-9]+$/

integer

Object version for optimistic concurrency control

400

Bad request

application/json

Every error has a code and a message. Some add more fields alongside them, with detail about the error.

object

code

string

The error code, for example VALIDATION_ERROR, INVALID, INVALID_REQUEST, UNAUTHORIZED, FORBIDDEN or NOT_FOUND. Program against this, not the message.

message

string

What went wrong, in words, for logs and support.

401

Invalid credentials (authentication is validated before instance key)

application/json

Every error has a code and a message. Some add more fields alongside them, with detail about the error.

object

code

string

The error code, for example VALIDATION_ERROR, INVALID, INVALID_REQUEST, UNAUTHORIZED, FORBIDDEN or NOT_FOUND. Program against this, not the message.

message

string

What went wrong, in words, for logs and support.

Example

{
  "code": "UNAUTHORIZED",
  "message": "Unauthorised"
}

404

Instance not found (only checked after successful authentication)

application/json

Every error has a code and a message. Some add more fields alongside them, with detail about the error.

object

code

string

The error code, for example VALIDATION_ERROR, INVALID, INVALID_REQUEST, UNAUTHORIZED, FORBIDDEN or NOT_FOUND. Program against this, not the message.

message

string

What went wrong, in words, for logs and support.

Was this page helpful?

Update an account

Authorizations

Parameters

Path Parameters

Request Bodyrequired

Responses

200

400

401

404

Request Body^required