---
title: "Update every message in a thread"
method: PATCH
path: "/v1/email/threads/{threadId}"
tags: ["Email"]
---

# Update every message in a thread

`PATCH /v1/email/threads/{threadId}`

## Request

- Base URL: `https://zernio.com/api`
- URL: `https://zernio.com/api/v1/email/threads/{threadId}`
- Auth: HTTP bearer

Applies `unread`, `starred` or a `folder` move to each message of the thread.

## Path parameters

- `threadId` string, required

## Request body

- EmailMessagePatch
  - `accountId` string, required
  - `unread` boolean
  - `starred` boolean
  - `folder` string: Well-known folder name or folder id to move into.

## Response `200`

The updated thread

- object
  - `data` EmailThread
    - `id` string
    - `accountId` string
    - `provider` 'google' | 'microsoft'
    - `subject` string
    - `snippet` string
    - `participants` EmailAddress[]
      - `email` string, email, required
      - `name` string, nullable
    - `messageIds` string[]
    - `draftIds` string[]
    - `folders` string[]
    - `hasAttachments` boolean
    - `hasDrafts` boolean
    - `unread` boolean
    - `starred` boolean
    - `earliestMessageAt` string, date-time, nullable
    - `latestMessageReceivedAt` string, date-time, nullable
    - `latestMessageSentAt` string, date-time, nullable

## Other responses

- `400`: Invalid request
- `401`: Missing or invalid API key. `code` is `missing_credentials` when no Authorization header was sent and `invalid_credentials` when the key is unknown, revoked or expired.
- `404`: Resource not found
- `412`: The connected account cannot serve this request until something outside the request changes. Two codes: - `account_scope_missing`: the account was connected without the area this endpoint needs (`details.grantedAreas`, `details.missingArea`), or Google reports the grant lacks a permission. Reconnect with a wider `scopes=`. - `admin_consent_required` (Microsoft): the tenant requires an administrator's approval. `details.adminConsentUrl` is the Microsoft Entra admin-consent link to hand to one; it opens in a browser with no API key and stays valid for one hour. `GET /v1/connect/microsoft/admin-consent` mints a fresh one.

## Changes

- **2026-10-27** `0a24331f5431`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/zernio/apis/zernio-api/changes/v1/email/threads/:threadId/patch.md)

---

[API](https://skmtc.dev/zernio/apis/zernio-api.md) - [All operations](https://skmtc.dev/zernio/apis/zernio-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zernio/apis/zernio-api/revisions/c319eb5d95b6?raw)