---
title: "Update a DeveloperApplication"
method: PATCH
path: "/developer-application/{developerApplicationId}"
---

# Update a DeveloperApplication

`PATCH /developer-application/{developerApplicationId}`

## Request body

- object
  - `name` string
  - `data` DeveloperApplicationDeveloperApplicationData
    - `description` string, required — A short description of the application that will be shown to users when they authorize the application.
    - `logoUrl` string — The URL of the application's logo that will be shown to users when they authorize the application.
    - `termsOfServiceUrl` string — The URL of the application's terms of service that will be shown to users when they authorize the application.
    - `privacyPolicyUrl` string — The URL of the application's privacy policy that will be shown to users when they authorize the application.
    - `redirectUris` string[] — The URLs of the application's redirect URIs that will be used when the application is authorized. The redirect URIs must match the ones registered here, or the authorization will fail.
    - `testUserEmails` string[] — A list of users that are allowed to test the application before it is approved for production. Max 10 users.
    - `type` 'service', required
    - `scopes` DeveloperApplicationPermissionKeyTypesPermissionPolicyKey[], required — The scopes that the application will request access to.
      - union
        - 'legal_entity.home.view' | 'legal_entity.view' | 'legal_entity.users.view' | 'legal_entity.users.modify' | 'legal_entity.users.card_groups.view' | 'legal_entity.users.card_groups.modify' | 'legal_entity.subscriptions.view' | 'legal_entity.subscriptions.modify' | 'legal_entity.accounting.view' | 'legal_entity.accounting.modify' | 'legal_entity.contacts.view' | 'legal_entity.contacts.modify' | 'legal_entity.third_party_credentials.view' | 'legal_entity.third_party_credentials.modify' | 'legal_entity.authorized_third_parties.view' | 'legal_entity.authorized_third_parties.modify' | 'legal_entity.api_key.view' | 'legal_entity.api_key.modify' | 'legal_entity.applications.view' | 'legal_entity.applications.modify' | 'legal_entity.permission_roles.view' | 'legal_entity.automation_rules.view' | 'legal_entity.automation_rules.modify' | 'legal_entity.developer_account.view' | 'legal_entity.developer_account.modify' | 'legal_entity.cashback.view' | 'legal_entity.cashback.modify' | 'legal_entity.webhooks.view' | 'legal_entity.webhooks.modify' | 'legal_entity.ticket_reconciliation.view' | 'legal_entity.analytics.view' | 'legal_entity.transactions.crypto_deposit.accelerate'
        - 'slash_accounts.view' | 'slash_accounts.home.view' | 'slash_accounts.cards.physical.view' | 'slash_accounts.cards.physical.modify' | 'slash_accounts.cards.virtual.view' | 'slash_accounts.cards.virtual.modify' | 'slash_accounts.incoming_transactions.view' | 'slash_accounts.transactions.view' | 'slash_accounts.transactions.ach_pull.initiate' | 'slash_accounts.transactions.ach_push.initiate' | 'slash_accounts.transactions.wire.initiate' | 'slash_accounts.transactions.between_accounts.initiate' | 'slash_accounts.transactions.rtp.initiate' | 'slash_accounts.balance.view' | 'slash_accounts.subaccounts.view' | 'slash_accounts.subaccounts.modify' | 'slash_accounts.merchant_allowlist.view' | 'slash_accounts.merchant_allowlist.modify' | 'slash_accounts.integrations.view' | 'slash_accounts.integrations.modify'
    - `allowedOrigins` string[], required — The URLs or IP addresses that the application is allowed to make token exchange requests from. If the application makes a token exchange request from a URL that is not in this list, the request will be blocked.

## Response `200`

OK

- DeveloperApplicationDeveloperApplicationModel
  - `id` string, required
  - `developerAccountId` string, required
  - `name` string, required
  - `status` 'test' | 'under_review' | 'production', required
  - `type` 'service', required
  - `data` DeveloperApplicationDeveloperApplicationData, required
    - `description` string, required — A short description of the application that will be shown to users when they authorize the application.
    - `logoUrl` string — The URL of the application's logo that will be shown to users when they authorize the application.
    - `termsOfServiceUrl` string — The URL of the application's terms of service that will be shown to users when they authorize the application.
    - `privacyPolicyUrl` string — The URL of the application's privacy policy that will be shown to users when they authorize the application.
    - `redirectUris` string[] — The URLs of the application's redirect URIs that will be used when the application is authorized. The redirect URIs must match the ones registered here, or the authorization will fail.
    - `testUserEmails` string[] — A list of users that are allowed to test the application before it is approved for production. Max 10 users.
    - `type` 'service', required
    - `scopes` DeveloperApplicationPermissionKeyTypesPermissionPolicyKey[], required — The scopes that the application will request access to.
      - union
        - 'legal_entity.home.view' | 'legal_entity.view' | 'legal_entity.users.view' | 'legal_entity.users.modify' | 'legal_entity.users.card_groups.view' | 'legal_entity.users.card_groups.modify' | 'legal_entity.subscriptions.view' | 'legal_entity.subscriptions.modify' | 'legal_entity.accounting.view' | 'legal_entity.accounting.modify' | 'legal_entity.contacts.view' | 'legal_entity.contacts.modify' | 'legal_entity.third_party_credentials.view' | 'legal_entity.third_party_credentials.modify' | 'legal_entity.authorized_third_parties.view' | 'legal_entity.authorized_third_parties.modify' | 'legal_entity.api_key.view' | 'legal_entity.api_key.modify' | 'legal_entity.applications.view' | 'legal_entity.applications.modify' | 'legal_entity.permission_roles.view' | 'legal_entity.automation_rules.view' | 'legal_entity.automation_rules.modify' | 'legal_entity.developer_account.view' | 'legal_entity.developer_account.modify' | 'legal_entity.cashback.view' | 'legal_entity.cashback.modify' | 'legal_entity.webhooks.view' | 'legal_entity.webhooks.modify' | 'legal_entity.ticket_reconciliation.view' | 'legal_entity.analytics.view' | 'legal_entity.transactions.crypto_deposit.accelerate'
        - 'slash_accounts.view' | 'slash_accounts.home.view' | 'slash_accounts.cards.physical.view' | 'slash_accounts.cards.physical.modify' | 'slash_accounts.cards.virtual.view' | 'slash_accounts.cards.virtual.modify' | 'slash_accounts.incoming_transactions.view' | 'slash_accounts.transactions.view' | 'slash_accounts.transactions.ach_pull.initiate' | 'slash_accounts.transactions.ach_push.initiate' | 'slash_accounts.transactions.wire.initiate' | 'slash_accounts.transactions.between_accounts.initiate' | 'slash_accounts.transactions.rtp.initiate' | 'slash_accounts.balance.view' | 'slash_accounts.subaccounts.view' | 'slash_accounts.subaccounts.modify' | 'slash_accounts.merchant_allowlist.view' | 'slash_accounts.merchant_allowlist.modify' | 'slash_accounts.integrations.view' | 'slash_accounts.integrations.modify'
    - `allowedOrigins` string[], required — The URLs or IP addresses that the application is allowed to make token exchange requests from. If the application makes a token exchange request from a URL that is not in this list, the request will be blocked.
  - `timestamp` string, required
  - `oauthClientId` string
  - `oauthClientSecret` string

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `429` — TooManyRequests
- `500` — Internal Error

---

[API](https://skmtc.net/slashfi/apis/slash-public-api.md) · [All operations](https://skmtc.net/slashfi/apis/slash-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/slashfi/slash-public-api/versions/773c90f079c5/schema)