Update a contact

PATCH/api/v1/contacts/{id}

scope contacts:write

Updates the fields you send; omitted fields are left alone, null clears. Changing the phone re-runs the duplicate check.

Path parameters

Name	Type	Description
`id`required	`string (uuid)`	Contact id

Body

application/json

Name	Type	Description
`name`optional	`string \| null`
`phone`optional	`string \| null`
`email`optional	`string (email) \| null`
`company`optional	`string \| null`
`avatar_url`optional	`string (url) \| null`

Request

curl -X PATCH "https://your-crm.example.com/api/v1/contacts/9d7e4c11-5a2b-4f7c-8e3d-2a1b0c9d8e7f" \
  -H "Authorization: Bearer $RAABTA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "company": "Khan Trading LLC"
  }'

Response · 200 OK

{
  "data": {
    "id": "9d7e4c11-5a2b-4f7c-8e3d-2a1b0c9d8e7f",
    "name": "Ayesha Khan",
    "phone": "+971501234567",
    "email": "ayesha@example.com",
    "company": "Khan Trading LLC",
    "avatar_url": null,
    "tags": [
      {
        "id": "1c2d3e4f-5a6b-4c7d-8e9f-0a1b2c3d4e5f",
        "name": "VIP",
        "color": "#10b981"
      }
    ],
    "custom_fields": [
      {
        "field_id": "6a7b8c9d-0e1f-4a2b-8c3d-4e5f6a7b8c9d",
        "name": "Source",
        "value": "Instagram ad"
      }
    ],
    "created_at": "2026-09-01T08:15:00.000Z",
    "updated_at": "2026-09-02T10:00:00.000Z"
  }
}

Response

Wrapped in { data: … }

Name	Type	Description
`id`required	`string (uuid)`	UUID
`name`required	`string \| null`	Display name
`phone`required	`string \| null`	E.164 phone number, or null for a contact reached only on Messenger/Instagram/web chat
`email`required	`string \| null`	Email address, when one is known
`company`required	`string \| null`	Company or organisation the contact belongs to
`avatar_url`required	`string \| null`	Profile picture URL, when a channel supplied one
`tags`required	`object[]`	Tags applied to this contact
`tags[].id`required	`string (uuid)`	UUID
`tags[].name`required	`string`	Tag name
`tags[].color`required	`string`	Hex colour chosen in the dashboard
`custom_fields`required	`object[]`	Custom-field values set on this contact
`custom_fields[].field_id`required	`string (uuid)`	The custom field definition
`custom_fields[].name`required	`string`	Field name as shown in the dashboard
`custom_fields[].value`required	`string \| null`	The value for this contact
`created_at`required	`string (date-time)`	ISO 8601 timestamp
`updated_at`required	`string (date-time)`	ISO 8601 timestamp

Errors

Status	Code	When
400	`bad_request`	The request could not be parsed: malformed JSON, an invalid cursor, or a query parameter of the wrong shape.
400	`validation_error`	The body or query failed validation. `details` lists each failing field with a `path` and a `message`.
401	`unauthorized`	No usable API key: the Authorization header is missing or malformed, or the key is unknown, revoked or expired. The three are deliberately indistinguishable.
403	`forbidden`	The key is valid but lacks the scope this endpoint requires, or the request came from an address outside the key’s IP allowlist. The message says which.
403	`account_suspended`	The account this key belongs to is suspended. Rotating the key will not help; contact support.
404	`not_found`	No such resource in this account. A resource that exists in another account also returns this.
409	`conflict`	The request conflicts with current state: a duplicate phone number on create, an invalid state transition, or an idempotent request that is still in flight.
429	`rate_limited`	The per-key budget, or the per-IP budget for failed authentication, is exhausted. Honour `Retry-After` before retrying.
500	`internal`	Something failed on our side. Safe to retry with the same Idempotency-Key; quote `request_id` if it persists.