Skip to main content
PATCH
Update entity attributes

Overview

Updates only attributes on an entity without touching other profile fields. Supports two modes: Attributes are stored verbatim β€” nested objects act as categories and are returned as sent, same as Update entity:
Merge is shallow at the top level: sending a category object (e.g. contact) overwrites that whole category. Inner keys not included are dropped. Use replace for a full rewrite.
When the assigned risk matrix includes an entity_updated trigger, rules run after a successful patch (respecting skipRulesExecution and matrix watchFields). Webhook entity.updated is emitted with changes.attributes.

Endpoint

Authentication

Requires entities:edit (legacy fallback: entities:write).

Path Parameters

string
required
UUID of the entity.

Request Body

object
required
Attribute map. Stored verbatim: scalar/array values at the root are uncategorized; nested objects act as categories.
string
default:"merge"
merge β€” additive patch (default). replace β€” full overwrite.
boolean
When true, skips risk matrix execution after the update.

Response

Examples

Merge (default)

Existing keys not included in the request remain unchanged.

Full replace

Keys that existed before but are omitted from attributes are removed.

Errors