Developers › API reference › Reference data

PATCH /api/v1/securities/{id}

Change a security (If-Match).

• Scope reference:write
• If-Match
• operationId referenceUpdateSecurity

The token needs the scope reference:write, and the person or service account behind it needs the matching privileges and account permissions, exactly as on the screens. See Scopes.

Request

PATCH /api/v1/securities/{id}

Path parameters

Headers

Body: SecurityIn

Other fields of the resource are accepted too; unknown fields are reported by a validation problem, never ignored silently.

Decimals (money, prices, quantities, percentages) are sent as strings, ids as strings, times as ISO 8601 UTC.

Examples

Keep the token in an environment variable (VESTORIS_TOKEN), never in the script.

curl -X PATCH "https://vestoris.com/api/v1/securities/3" \
  -H "Authorization: Bearer $VESTORIS_TOKEN" \
  -H 'If-Match: "3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f"' \
  -H "Content-Type: application/json" \
  -d '{"symbol":"EXMP","name":"Example Corp.","sector":"Industrials","issuer":"Example Corp.","user_defined":{"Internal rating":"BBB"}}'

import os, requests

r = requests.patch(
    "https://vestoris.com/api/v1/securities/3",
    headers={
        "Authorization": f"Bearer {os.environ['VESTORIS_TOKEN']}",
        "If-Match": "\"3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f\"",
    },
    json={
        "symbol": "EXMP",
        "name": "Example Corp.",
        "sector": "Industrials",
        "issuer": "Example Corp.",
        "user_defined": {
            "Internal rating": "BBB"
        }
    },
    timeout=30,
)
r.raise_for_status()  # errors are application/problem+json with a stable "code"
print(r.json())

const res = await fetch("https://vestoris.com/api/v1/securities/3", {
  method: "PATCH",
  headers: {
    Authorization: `Bearer ${process.env.VESTORIS_TOKEN}`,
    "If-Match": "\"3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f\"",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
      "symbol": "EXMP",
      "name": "Example Corp.",
      "sector": "Industrials",
      "issuer": "Example Corp.",
      "user_defined": {
          "Internal rating": "BBB"
      }
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.detail}`); // problem+json
console.log(data);

Response

200 OK, application/json: Security. With an ETag header. Rate-limit headers: RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset.

Example response

HTTP/1.1 200 OK
Content-Type: application/json
ETag: "3f1a9c0e5b7d2a4c8e6f0b1d3a5c7e9f"

{
    "id": "1042",
    "symbol": "AAPL",
    "name": "Apple Inc.",
    "isin": "US0378331005",
    "cusip": "037833100",
    "sedol": "2046251",
    "figi": "BBG000B9XRY4",
    "sec_type": "common",
    "sector": "Information Technology",
    "industry": "Consumer Electronics",
    "issuer": "Apple Inc.",
    "issuer_code": "AAPL",
    "country": "US",
    "asset_class": "Equity",
    "market_cap_bucket": "mega",
    "currency": "USD",
    "exchange": "XNAS",
    "avg_daily_volume": "58000000",
    "esg_flags": [],
    "active": true,
    "user_defined": {
        "Internal rating": "A"
    },
    "created_at": "2026-10-27T14:30:00Z"
}

Example values. Your values depend on your firm's data; prices, orders and fills are simulated.

Status codes and errors

Errors are application/problem+json (RFC 9457) with a stable code to program against; the detail says what to fix. See Errors.

{
    "type": "https://vestoris.com/developers/errors#validation_failed",
    "title": "Validation failed",
    "status": 422,
    "detail": "Quantity must be greater than zero.",
    "code": "validation_failed",
    "instance": "/api/v1/securities/3"
}

On the screens

The same thing in the app is explained in:

• Securities and prices