---
title: "Update account center settings"
method: PATCH
path: "/api/account-center"
tags: ["Account center"]
---

# Update account center settings

`PATCH /api/account-center`

Update the account center settings with the provided settings.

## Request body

- object
  - `enabled` boolean — Enable or disable the account API.
  - `fields` object — The fields settings for the account API.
    - `name` 'Off' | 'ReadOnly' | 'Edit'
    - `avatar` 'Off' | 'ReadOnly' | 'Edit'
    - `profile` 'Off' | 'ReadOnly' | 'Edit'
    - `email` 'Off' | 'ReadOnly' | 'Edit'
    - `phone` 'Off' | 'ReadOnly' | 'Edit'
    - `password` 'Off' | 'ReadOnly' | 'Edit'
    - `username` 'Off' | 'ReadOnly' | 'Edit'
    - `social` 'Off' | 'ReadOnly' | 'Edit'
    - `customData` 'Off' | 'ReadOnly' | 'Edit'
    - `mfa` 'Off' | 'ReadOnly' | 'Edit'
    - `passkey` 'Off' | 'ReadOnly' | 'Edit'
    - `session` 'Off' | 'ReadOnly' | 'Edit'
  - `webauthnRelatedOrigins` string[] — The allowed domains for webauthn.
  - `deleteAccountUrl` object, nullable — The custom endpoint URL for account deletion.
  - `customCss` string, nullable
  - `profileFields` object[], nullable — Ordered list of custom profile fields to show in the prebuilt account center. Each entry references an existing field by name in the custom profile fields catalog.
    - `name` string, required

## Response `200`

Updated account center settings.

- object
  - `tenantId` string, required
  - `id` string, required
  - `enabled` boolean, required
  - `fields` object, required
    - `name` 'Off' | 'ReadOnly' | 'Edit'
    - `avatar` 'Off' | 'ReadOnly' | 'Edit'
    - `profile` 'Off' | 'ReadOnly' | 'Edit'
    - `email` 'Off' | 'ReadOnly' | 'Edit'
    - `phone` 'Off' | 'ReadOnly' | 'Edit'
    - `password` 'Off' | 'ReadOnly' | 'Edit'
    - `username` 'Off' | 'ReadOnly' | 'Edit'
    - `social` 'Off' | 'ReadOnly' | 'Edit'
    - `customData` 'Off' | 'ReadOnly' | 'Edit'
    - `mfa` 'Off' | 'ReadOnly' | 'Edit'
    - `passkey` 'Off' | 'ReadOnly' | 'Edit'
    - `session` 'Off' | 'ReadOnly' | 'Edit'
  - `webauthnRelatedOrigins` string[], required
  - `deleteAccountUrl` string, nullable, required
  - `customCss` string, nullable, required
  - `profileFields` object[], nullable, required
    - `name` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/a163dc77d842/schema)