---
title: "Update a control"
method: PUT
path: "/issuing/controls/{controlId}"
tags: ["Controls"]
---

# Update a control

`PUT /issuing/controls/{controlId}`

## Request

- Base URL: `https://{prefix}.api.sandbox.checkout.com`
- URL: `https://{prefix}.api.sandbox.checkout.com/issuing/controls/{controlId}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `string` scopes: `issuing:controls-write`
- TypeScript: <https://skmtc.dev/checkout/apis/checkout-com-api-reference/docs/issuing/controls/:controlId/put.ts> (a function with typed inputs; its response is checked against the schema)

Updates an existing control.

## Path parameters

- `controlId` string, required: The control's unique identifier.

## Request body

- union
  - UpdateControlRequestMccLimit: The control you want to update. You can update only one control per request.
    - `description` string: A description for the control.
    - `mcc_limit` MccLimit: The <a href= "https://www.checkout.com/docs/resources/codes/merchant-category-codes">merchant category code (MCC)</a> rule, which determines the types of businesses transactions can be processed from.
      - `type` 'allow' | 'block', required: Sets whether to allow or block the list of MCCs supplied.
      - `mcc_list` string[], required: The list of <a href= "https://www.checkout.com/docs/resources/codes/merchant-category-codes">MCCs</a> to allow or block transactions from, as 4-digit ISO 18245 codes.
  - UpdateControlRequestMidLimit: The control you want to update. You can only update one control per request.
    - `description` string: A description for the control.
    - `mid_limit` MidLimit: The merchant identification (MID) code rule, which determines the merchants from whom transactions can be processed.
      - `type` 'allow' | 'block', required: Sets whether to allow or block the list of MIDs supplied.
      - `mid_list` MidCode[], required: The list of merchant identification (MID) codes to allow or block transactions from.
  - UpdateControlRequestVelocityLimit: The control you want to update. You can only update one control per request.
    - `description` string: A description for the control.
    - `velocity_limit` object: The velocity limit, which determines how much a card can spend over a given period of time.
      - `amount_limit` integer: The amount that can be spent using the card, in minor units.
      - `mcc_list` string[]: The list of <a href= "https://www.checkout.com/docs/resources/codes/merchant-category-codes">merchant category codes (MCCs)</a> that the velocity limit applies to, as 4-digit ISO 18245 codes.
      - `mid_list` string[]: The list of merchant identification (MID) codes to allow or block transactions from. Note that `mcc_list` and `mid_list` cannot be set together.

## Response `200`

Control updated successfully

- UpdateControlResponse: The control's details.
  - `id` string, required: The control's unique identifier.
  - `description` string: The description of the control.
  - `control_type` 'velocity_limit' | 'mcc_limit' | 'mid_limit', required: The control's type. A `velocity_limit` determines how much can be spent over a given period of time. An `mcc_limit` determines the types of businesses from which transactions can be processed. A `mid_limit` specifies the merchants from whom transactions can be processed.
  - `target_id` string, required: The ID of the card or control profile.
  - `is_editable` boolean, required: Indicates whether you can change this control. <br> `false` This is an immutable control applied by Checkout.com and you cannot change it. <br> `true` You applied this control and can change it.
  - `created_date` string, UTC, required
  - `last_modified_date` string, UTC, required

## Other responses

- `401`: Unauthorized
- `404`: Control not found
- `422`: Invalid data was sent
- `500`: Internal Server Error
- `503`: Service Unavailable

---

[API](https://skmtc.dev/checkout/apis/checkout-com-api-reference.md) - [All operations](https://skmtc.dev/checkout/apis/checkout-com-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/checkout/apis/checkout-com-api-reference/revisions/0f1abdb1c3e9?raw)