Update a cardholder
/v1/cardholders/{id}Requires an API client bearer token.
Updates cardholder identity fields. Requires an Idempotency-Key header and at least one field in the body. Once KYC has passed or the cardholder is attested, full_name/country lock against an actual change (422 identity_locked); email/phone stay mutable. A patch whose values already match the stored row is a no-op: 200, no write, no event. Emits cardholder.updated listing only the fields whose value actually changed.
Parameters
Path parameters
| Name | Required | Description |
|---|---|---|
| id | required |
Header parameters
| Name | Required | Description |
|---|---|---|
| Idempotency-Key | required | Client-chosen. An identical retry with the same key returns the stored response; reusing the key with a different payload returns 409. |
Request body
Example
curl -X PATCH https://api.rigid.fi/v1/cardholders/{id} \
-H "Authorization: Bearer $RIGID_API_TOKEN" \
-H "Content-Type: application/json" \
-H "Idempotency-Key: $(uuidgen)" \
-d '{
"full_name": "string",
"email": "email",
"phone": "string",
"country": "string"
}'Responses
200The updated cardholder.
400Validation error
401Authentication required
403Forbidden — the caller may not act on this programme, or (code `live_mode_card_read_only`) live mode refuses a cardholder edit, pending scheme certification
404Cardholder not found
409Idempotency-Key reused with a different payload
422Empty patch, or full_name/country patched after KYC passed or attestation (identity_locked)
500Internal server error