Update a client profile

Update the phone and postal address for the client selected by X-Hevn-Account. Everything else about a client is verification data.

PATCH /client

Update a client profile

cURL

curl --request PATCH \
  --url https://api.hevn.finance/dapi/v1/client \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-Hevn-Account: <x-hevn-account>' \
  --data '
{
  "phone": "<string>",
  "address": {
    "streetAddress": "<string>",
    "addressLine2": "<string>",
    "city": "<string>",
    "state": "<string>",
    "zip": "<string>"
  }
}
'

200

{
  "id": "cl_9f2c1ab84d7e4f1fa3c65b0e7d9a2c41",
  "status": "provisioning",
  "createdAt": "2023-11-07T05:31:56Z",
  "name": "<string>",
  "email": "<string>",
  "phone": "<string>",
  "baseSmartWallet": "<string>",
  "kybStatus": "notStarted",
  "kybApplicationId": "kyb_9f2c1ab84d7e4f1fa3c65b0e7d9a2c41",
  "failure": {
    "code": "provisioning_failed",
    "message": "<string>",
    "retriable": false
  },
  "pollUrl": "<string>"
}

Authorizations

Authorization · string · header · required

Platform access token from POST /auth/token, carrying the platform audience and the developer_key_id of the registration that minted it. It acts as your own account; name a client you created with X-Hevn-Account: cl_…. Every request re-checks that the registration is still active and that the caller's source IP is inside its allowlist. A token is valid only against the server that issued it, so sandbox tokens are refused in production and production tokens in the sandbox.

Headers

Idempotency-Key · string | null

Your own key for this write, ^[A-Za-z0-9._:-]{1,128}$. A retry with the same key replays the first answer; the same key with a different request is refused.

Example:

"po-inv-2026-114"

X-Hevn-Account · string · required

The selected client account, as a cl_… id.

Example:

"cl_9f2c1ab84d7e4f1fa3c65b0e7d9a2c41"

x-api-key · string | null

Body

application/json

phone · string | null

Phone number in international E.164 format.

Pattern: ^\+[1-9]\d{6,14}$

address · ClientAddressRequest · object | null

Postal address of the account holder.

Show child attributes

Response

200

application/json

Successful Response

id · string · required

Stable public identifier for this account.

Pattern: ^(?:cl_)?[A-Za-z0-9._:\-]{1,216}$

Example:

"cl_9f2c1ab84d7e4f1fa3c65b0e7d9a2c41"

status · enum<string> · required

Current account-provisioning status.

Available options: provisioning, ready, failed

createdAt · string<date-time> · required

UTC timestamp when the account was created.

name · string | null

Legal or trading name of the account.

email · string | null

Email address associated with the account.

phone · string | null

Phone number in international E.164 format.

baseSmartWallet · string | null

Base smart-wallet address controlled by the account.

kybStatus · enum<string> · default: notStarted

Current business-verification status.

Available options: notStarted, pending, approved, rfi, rejected

kybApplicationId · string | null

Latest immutable business-verification application identifier.

Pattern: ^(?:kyb_)?[A-Za-z0-9._:\-]{1,216}$

Example:

"kyb_9f2c1ab84d7e4f1fa3c65b0e7d9a2c41"

failure · ClientFailureResponse · object | null

Provisioning failure details, when present.

Show child attributes

pollUrl · string | null

Relative API URL to poll with this response's id in X-Hevn-Account.