Developers › API reference › Compliance

PATCH /api/v1/compliance/rules/{id}

Change a draft (If-Match).

• Scope compliance:rules:write
• If-Match
• operationId complianceUpdate

The token needs the scope compliance:rules:write, and the person or service account behind it needs the matching privileges and account permissions, exactly as on the screens. See Scopes.

Request

PATCH /api/v1/compliance/rules/{id}

Path parameters

Headers

Body: RuleIn

Decimals (money, prices, quantities, percentages) are sent as strings, ids as strings, times as ISO 8601 UTC.

Examples

Keep the token in an environment variable (VESTORIS_TOKEN), never in the script.

curl -X PATCH "https://vestoris.com/api/v1/compliance/rules/41" \
  -H "Authorization: Bearer $VESTORIS_TOKEN" \
  -H 'If-Match: "3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f"' \
  -H "Content-Type: application/json" \
  -d '{"name":"Issuer limit 5% (Growth)","rule_type":"max_issuer_pct","params":{"limit_pct":"5","include_etfs":false},"scope":{"type":"package","ids":["3"]},"severity":"block","run_points":["pretrade","posttrade"],"change_of":null,"source_text":"No more than 5% of any Growth account in a single issuer, except ETFs."}'

import os, requests

r = requests.patch(
    "https://vestoris.com/api/v1/compliance/rules/41",
    headers={
        "Authorization": f"Bearer {os.environ['VESTORIS_TOKEN']}",
        "If-Match": "\"3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f\"",
    },
    json={
        "name": "Issuer limit 5% (Growth)",
        "rule_type": "max_issuer_pct",
        "params": {
            "limit_pct": "5",
            "include_etfs": False
        },
        "scope": {
            "type": "package",
            "ids": [
                "3"
            ]
        },
        "severity": "block",
        "run_points": [
            "pretrade",
            "posttrade"
        ],
        "change_of": None,
        "source_text": "No more than 5% of any Growth account in a single issuer, except ETFs."
    },
    timeout=30,
)
r.raise_for_status()  # errors are application/problem+json with a stable "code"
print(r.json())

const res = await fetch("https://vestoris.com/api/v1/compliance/rules/41", {
  method: "PATCH",
  headers: {
    Authorization: `Bearer ${process.env.VESTORIS_TOKEN}`,
    "If-Match": "\"3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f\"",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
      "name": "Issuer limit 5% (Growth)",
      "rule_type": "max_issuer_pct",
      "params": {
          "limit_pct": "5",
          "include_etfs": false
      },
      "scope": {
          "type": "package",
          "ids": [
              "3"
          ]
      },
      "severity": "block",
      "run_points": [
          "pretrade",
          "posttrade"
      ],
      "change_of": null,
      "source_text": "No more than 5% of any Growth account in a single issuer, except ETFs."
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.detail}`); // problem+json
console.log(data);

Response

200 OK, application/json: Rule. With an ETag header. Rate-limit headers: RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset.

Example response

HTTP/1.1 200 OK
Content-Type: application/json
ETag: "3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f"

{
    "id": "1042",
    "lineage_id": "41",
    "version": 1,
    "name": "Issuer limit 5% (Growth)",
    "rule_type": "max_issuer_pct",
    "severity": "block",
    "status": "active",
    "display_status": "Active",
    "pending_action": "",
    "definition": {
        "params": [],
        "scope": {
            "type": "text",
            "ids": []
        },
        "run_points": [
            "pretrade",
            "posttrade"
        ]
    },
    "definition_hash": "9f2c…",
    "restatement": "Block any order that would make one issuer more than 5.00% of a Growth account (ETFs excepted).",
    "source_text": "No more than 5% of any Growth account in a single issuer, except ETFs.",
    "drafted_by_ai": false,
    "test_bench": null,
    "effective_from": null,
    "effective_to": null,
    "created_by": "7",
    "created_at": "2026-10-27T14:30:00Z",
    "decided_by": null,
    "decided_at": null,
    "decision_note": ""
}

Example values. Your values depend on your firm's data; prices, orders and fills are simulated.

Status codes and errors

Errors are application/problem+json (RFC 9457) with a stable code to program against; the detail says what to fix. See Errors.

{
    "type": "https://vestoris.com/developers/errors#validation_failed",
    "title": "Validation failed",
    "status": 422,
    "detail": "Quantity must be greater than zero.",
    "code": "validation_failed",
    "instance": "/api/v1/compliance/rules/41"
}

On the screens

The same thing in the app is explained in:

• Rules, the test bench and sign-off