---
title: "Update Sub-Account User Token"
method: PATCH
path: "/api/v1/sub-accounts/etoro-trading/user-tokens/{userTokenId}"
tags: ["Sub-Accounts - eToro Trading"]
---

# Update Sub-Account User Token

`PATCH /api/v1/sub-accounts/etoro-trading/user-tokens/{userTokenId}`

## Request

- Base URL: `https://public-api.etoro.com`
- URL: `https://public-api.etoro.com/api/v1/sub-accounts/etoro-trading/user-tokens/{userTokenId}`
- Auth: OAuth 2
  - Authorization code
  - Scopes: `etoro-public:sub-accounts:write`
- TypeScript: <https://skmtc.dev/etoro/apis/etoro-api/docs/api/v1/sub-accounts/etoro-trading/user-tokens/:userTokenId/patch.ts> (a function with typed inputs; its response is checked against the schema)

**Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget.

---

Updates an existing sub-account user token's scopes, IP whitelist, or expiration. At least one field must be provided.

## Path parameters

- `userTokenId` string, uuid, required

## Headers

- `x-request-id` string, uuid, required
- `x-api-key` string, password, required
- `x-user-key` string, password, required
- `x-sub-account-id` string, required

## Request body

- UpdateSubAccountUserTokenRequest
  - `scopeNames` string[]: The replacement scope names. When provided, must be a subset of the scopes returned by GET /api/v1/sub-accounts/etoro-trading/user-tokens/scopes.
  - `ipsWhitelist` string[]: The replacement IPv4 whitelist.
  - `expiresAt` string, date-time: The replacement UTC expiration.

## Response `204`

User token updated successfully

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden — a requested scope name is not allowed, or the sub-account is not owned by the caller
- `404`: The user token does not exist for the sub-account
- `429`: Too Many Requests — a downstream dependency is throttling requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/etoro/apis/etoro-api.md) - [All operations](https://skmtc.dev/etoro/apis/etoro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/etoro/apis/etoro-api/revisions/69c1fb266c35?raw)
