---
title: "Update a domain config"
method: PUT
path: "/organizations/{organizationId}/domain-configs/{configId}"
tags: ["Phishing Configs"]
---

# Update a domain config

`PUT /organizations/{organizationId}/domain-configs/{configId}`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/organizations/{organizationId}/domain-configs/{configId}`
- Auth: HTTP bearer

## Path parameters

- `organizationId` string, required
- `configId` string, required

## Request body

- ConfigFields
  - `send_response` boolean, required: Whether to send a response to phishing attempts
  - `domains` string[], required: List of domains for phishing config
  - `fwd_address` string, nullable: Forward address for phishing emails
  - `phishing_inbox_name` string, nullable: Name of the phishing inbox

## Response `200`

Returns the updated domain config fields

- ConfigFields
  - `send_response` boolean, required: Whether to send a response to phishing attempts
  - `domains` string[], required: List of domains for phishing config
  - `fwd_address` string, nullable: Forward address for phishing emails
  - `phishing_inbox_name` string, nullable: Name of the phishing inbox

## Other responses

- `400`: Invalid request body or missing config id
- `403`: User is not authorized for this organization
- `500`: Internal server error

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)