---
title: "Bulk update blocked spam sources"
method: PATCH
path: "/v3/blocked_spam_sources/bulk"
tags: ["Blocked Spam Sources"]
---

# Bulk update blocked spam sources

`PATCH /v3/blocked_spam_sources/bulk`

## Request

- Base URL: `https://harvest.greenhouse.io`
- URL: `https://harvest.greenhouse.io/v3/blocked_spam_sources/bulk`
- Auth: OAuth 2
  - Authorization code: `https://auth.greenhouse.io/authorize`
  - Client credentials
  - Token URL: `https://auth.greenhouse.io/token` scopes: `harvest:blocked_spam_sources:update`

Updates the `note` on multiple blocked spam sources in a single request. Each item in `data` must include the `id` of the target entry; `source_type` and `value` cannot be changed via this endpoint. Per-item failures are reported in the response without aborting the rest of the batch.

## Request body

- object
  - `callback_url` string: Optional HTTPS URL Greenhouse will POST to when every row in `data` has finished. Omit to poll `GET /v3/bulk_requests/{bulk_action_uuid}` instead.
  - `data` object[], required: Array of single-resource update payloads to process. Each item must include the integer `id` of the record to update and otherwise match the schema of the matching non-bulk PATCH endpoint; rows are validated and executed independently.
    - `note` string: Replacement annotation for the blocked spam source, typically used to record why the source was added or last touched (e.g. ticket id, internal incident reference). Limited to 255 characters. `source_type` and `value` are immutable — to change either, delete the entry and create a new one.
    - `id` integer, required

## Response `202`

Accepted

- object
  - `bulk_action_uuid` string: UUID assigned to the new bulk request. Use this with `GET /v3/bulk_requests/{bulk_action_uuid}` to monitor progress and retrieve per-row results.
  - `status` string: Initial lifecycle state of the new bulk request, typically `building` immediately after creation. See the bulk request response schema for the full set of values.
  - `status_url` string: Relative path that returns the current status of the bulk request. Append this to your Harvest base URL to fetch the latest state.

## Other responses

- `401`: Unauthorized
- `413`: Payload is larger than 10MB
- `422`: Validation Error
- `429`: Client has more than 5 active jobs

---

[API](https://skmtc.dev/greenhouse/apis/harvest-api.md) - [All operations](https://skmtc.dev/greenhouse/apis/harvest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/greenhouse/apis/harvest-api/revisions/822822e3f771?raw)