Update connected account credentials

Replace the API credentials (secret + API key) of a connected account.

Credentials belong to an API key, which can back a single account or an entire hierarchy. Updating them affects all accounts sharing that key, so the endpoint returns an array of modified accounts.

The creds field must be a Base64-encoded RSA-encrypted credential blob; use GET /connected_accounts/credentials/public_key to retrieve the public key for encryption. Both creds and apiKey are mandatory.

Validation against the exchange is synchronous, but the update itself is pending mobile approval — the existing credentials stay live until the change is approved, so none of the affected accounts are disconnected in the meantime.

Endpoint Permission: Admin, Non-Signing Admin.

Note: This endpoint is currently in beta and might be subject to changes.

POST

connected_accounts

{accountId}

credentials

TypeScript

const response: Promise<FireblocksResponse<UpdateConnectedAccountCredentialsResponse>> = fireblocks.connectedAccountsBeta.updateConnectedAccountCredentials(connectedAccountsBetaApiUpdateConnectedAccountCredentialsRequest);

CompletableFuture<ApiResponse<UpdateConnectedAccountCredentialsResponse>> response = fireblocks.connectedAccountsBeta().updateConnectedAccountCredentials(updateConnectedAccountCredentialsRequest, accountId, idempotencyKey);

curl --request POST \
  --url https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials \
  --header 'Content-Type: application/json' \
  --data '
{
  "creds": "base64encodedencryptedcredentials==",
  "apiKey": "api_key_new_abc123"
}
'

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({creds: 'base64encodedencryptedcredentials==', apiKey: 'api_key_new_abc123'})
};

fetch('https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'creds' => 'base64encodedencryptedcredentials==',
    'apiKey' => 'api_key_new_abc123'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials"

	payload := strings.NewReader("{\n  \"creds\": \"base64encodedencryptedcredentials==\",\n  \"apiKey\": \"api_key_new_abc123\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"creds\": \"base64encodedencryptedcredentials==\",\n  \"apiKey\": \"api_key_new_abc123\"\n}"

response = http.request(request)
puts response.read_body

{
  "accounts": [
    {
      "accountId": "acc-789012",
      "name": "My Exchange Account",
      "status": "WAITING_FOR_APPROVAL"
    }
  ]
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "<string>",
  "code": 123
}

Headers

Idempotency-Key

string

A unique identifier for the request. If the request is sent multiple times with the same idempotency key, the server will return the same response as the first request. The idempotency key is valid for 24 hours.

Path Parameters

accountId

string

required

The unique identifier of the connected account whose API key credentials are being replaced.

Minimum string length: 1

Body

application/json

creds

string<byte>

required

Base64-encoded RSA-encrypted credential blob (the new secret). Encrypt using the public key from GET /connected_accounts/credentials/public_key.

Example:

"base64encodedencryptedcredentials=="

apiKey

string

required

The new account-level API key. Mandatory for credential update.

Example:

"api_key_new_abc123"

Response

Credential update initiated (pending approval).

accounts

object[]

required

The account whose credentials are pending update (status WAITING_FOR_APPROVAL). Old credentials stay live until the change is approved.

Show child attributes

Example:

[
  {
    "accountId": "acc-789012",
    "name": "My Exchange Account",
    "status": "WAITING_FOR_APPROVAL"
  }
]

⌘I

TypeScript

const response: Promise<FireblocksResponse<UpdateConnectedAccountCredentialsResponse>> = fireblocks.connectedAccountsBeta.updateConnectedAccountCredentials(connectedAccountsBetaApiUpdateConnectedAccountCredentialsRequest);

CompletableFuture<ApiResponse<UpdateConnectedAccountCredentialsResponse>> response = fireblocks.connectedAccountsBeta().updateConnectedAccountCredentials(updateConnectedAccountCredentialsRequest, accountId, idempotencyKey);

curl --request POST \
  --url https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials \
  --header 'Content-Type: application/json' \
  --data '
{
  "creds": "base64encodedencryptedcredentials==",
  "apiKey": "api_key_new_abc123"
}
'

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({creds: 'base64encodedencryptedcredentials==', apiKey: 'api_key_new_abc123'})
};

fetch('https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'creds' => 'base64encodedencryptedcredentials==',
    'apiKey' => 'api_key_new_abc123'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials"

	payload := strings.NewReader("{\n  \"creds\": \"base64encodedencryptedcredentials==\",\n  \"apiKey\": \"api_key_new_abc123\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fireblocks.io/v1/connected_accounts/{accountId}/credentials")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"creds\": \"base64encodedencryptedcredentials==\",\n  \"apiKey\": \"api_key_new_abc123\"\n}"

response = http.request(request)
puts response.read_body

{
  "accounts": [
    {
      "accountId": "acc-789012",
      "name": "My Exchange Account",
      "status": "WAITING_FOR_APPROVAL"
    }
  ]
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "Provider 'BINANCE' not found",
  "code": 3228,
  "errorMessage": "Insufficient permissions to rename connected account",
  "errorCode": "INSUFFICIENT_PERMISSIONS"
}

{
  "message": "<string>",
  "code": 123
}

Introduction

Errors & Statuses

Data Objects

API Endpoints

Update connected account credentials

Headers

Path Parameters

Body

Response