> ## Documentation Index > Fetch the complete documentation index at: https://api-portal.etoro.com/llms.txt > Use this file to discover all available pages before exploring further. # Update User Token (v2) > **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Updates the settings of an existing user token using scope names. At least one field must be provided. Scopes are specified by name (scopeNames); scope ids are not supported in v2. ## OpenAPI ````yaml /api-reference/openapi.json patch /api/v2/agent-portfolios/{agentPortfolioId}/user-tokens/{userTokenId} openapi: 3.0.1 info: title: eToro Api version: v1.279.0 description: >- eToro’s public API provides access to real-time financial data, trading insights, and account management features, allowing developers to integrate eToro’s services into their applications. With access to market prices, historical data, and social trading information, the API empowers users to enhance their trading strategies. Designed for security and scalability, the eToro API ensures smooth and reliable integration for a variety of financial applications. For more details on integrating with eToro's public WebSocket service, please refer to the dedicated [WebSocket documentation](./websocket/websocket-doc.html). servers: - url: https://public-api.etoro.com description: eToro Public API security: [] tags: - name: Agent Portfolios - name: Social Feeds - name: Balances - name: Clubs - name: Watchlists - name: Asset Explorer - name: Market Data - name: Identity - name: Cash Accounts - name: Notifications - name: PI Data - name: Price Alerts - name: Sub Accounts eToro Trading - name: Sub Accounts - name: Trading Demo - name: Trading Real - name: Users Info - name: User Stats - name: Deprecated paths: /api/v2/agent-portfolios/{agentPortfolioId}/user-tokens/{userTokenId}: patch: tags: - Agent Portfolios summary: Update User Token (v2) description: >- **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Updates the settings of an existing user token using scope names. At least one field must be provided. Scopes are specified by name (scopeNames); scope ids are not supported in v2. operationId: updateAgentPortfolioUserTokenV2 parameters: - name: x-request-id in: header required: true schema: type: string format: uuid example: 905f854a-45ba-4e33-98ee-d219c8cd4c68 description: A unique request identifier. - name: x-api-key in: header required: true schema: type: string format: password example: lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663 description: API key for authentication. - name: x-user-key in: header required: true schema: type: string format: password example: >- eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_ description: User-specific authentication key. - name: agentPortfolioId in: path required: true schema: type: string format: uuid description: The unique identifier of the agent-portfolio. - name: userTokenId in: path required: true schema: type: string format: uuid description: The unique identifier of the user token to update. requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/UpdateUserTokenV2Request' responses: '204': description: User token updated successfully headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/AgentPortfolioApi_ErrorResponse' examples: NoChanges: summary: No changes provided value: errorCode: NoChangesDetected errorMessage: At least one field must be provided '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/AgentPortfolioApi_ErrorResponse' example: errorCode: Unauthorized errorMessage: Unauthorized '403': description: Forbidden — a requested scope name is not allowed content: application/json: schema: $ref: '#/components/schemas/AgentPortfolioApi_ErrorResponse' example: errorCode: ScopeNameNotAllowed errorMessage: Scope name not allowed '404': description: Agent-portfolio or user token not found content: application/json: schema: $ref: '#/components/schemas/AgentPortfolioApi_ErrorResponse' examples: AgentPortfolioNotFound: summary: Agent-portfolio not found value: errorCode: NotFound errorMessage: Agent-portfolio not found UserTokenNotFound: summary: User token not found value: errorCode: NotFound errorMessage: User token not found '429': description: Too Many Requests content: application/json: schema: $ref: '#/components/schemas/AgentPortfolioApi_ErrorResponse' example: errorCode: TooManyRequests errorMessage: Too many requests headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 Retry-After: description: Seconds to wait before retrying. schema: type: integer example: 60 '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/AgentPortfolioApi_ErrorResponse' example: errorCode: UnhandledException errorMessage: Global Error security: - oauth2: - etoro-public:agent-portfolio:write components: schemas: UpdateUserTokenV2Request: type: object properties: scopeNames: type: array items: type: string description: >- An updated set of permission scope names for the token. Available scopes: etoro-public:trade.real:read, etoro-public:trade.real:write, etoro-public:trade.demo:read, etoro-public:trade.demo:write. example: - etoro-public:trade.real:read - etoro-public:trade.real:write ipsWhitelist: type: array items: type: string description: An updated set of IPv4 addresses allowed to use this token. example: - 192.168.1.1 expiresAt: type: string format: date-time description: An updated expiration date and time (UTC) for the token. example: '2026-12-31T23:59:59Z' AgentPortfolioApi_ErrorResponse: type: object properties: errorCode: type: string errorMessage: type: string securitySchemes: oauth2: type: oauth2 description: >- eToro OAuth2. Each operation lists the scopes that grant access as separate `security` requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. The same scopes back the x-api-key/x-user-key credential pair. flows: authorizationCode: authorizationUrl: '' tokenUrl: '' scopes: etoro-public:agent-portfolio:read: Grants access to the 'etoro-public:agent-portfolio:read' scope. etoro-public:agent-portfolio:write: Grants access to the 'etoro-public:agent-portfolio:write' scope. etoro-public:club:read: Grants access to the 'etoro-public:club:read' scope. etoro-public:demo:read: Grants access to the 'etoro-public:demo:read' scope. etoro-public:demo:write: Grants access to the 'etoro-public:demo:write' scope. etoro-public:feed:read: Grants access to the 'etoro-public:feed:read' scope. etoro-public:feed:write: Grants access to the 'etoro-public:feed:write' scope. etoro-public:market-data:read: Grants access to the 'etoro-public:market-data:read' scope. etoro-public:money.balance:read: Grants access to the 'etoro-public:money.balance:read' scope. etoro-public:money.cash-transactions:read: >- Grants access to the 'etoro-public:money.cash-transactions:read' scope. etoro-public:money.transfer:read: Grants access to the 'etoro-public:money.transfer:read' scope. etoro-public:money.transfer:write: Grants access to the 'etoro-public:money.transfer:write' scope. etoro-public:money.withdraw.crypto:read: >- Grants access to the 'etoro-public:money.withdraw.crypto:read' scope. etoro-public:money.withdraw.crypto:write: >- Grants access to the 'etoro-public:money.withdraw.crypto:write' scope. etoro-public:money:transfer: Grants access to the 'etoro-public:money:transfer' scope. etoro-public:notifications:read: Grants access to the 'etoro-public:notifications:read' scope. etoro-public:notifications:write: Grants access to the 'etoro-public:notifications:write' scope. etoro-public:pi-data:read: Grants access to the 'etoro-public:pi-data:read' scope. etoro-public:price-alerts:read: Grants access to the 'etoro-public:price-alerts:read' scope. etoro-public:price-alerts:write: Grants access to the 'etoro-public:price-alerts:write' scope. etoro-public:real:read: Grants access to the 'etoro-public:real:read' scope. etoro-public:real:write: Grants access to the 'etoro-public:real:write' scope. etoro-public:sso-applications:read: Grants access to the 'etoro-public:sso-applications:read' scope. etoro-public:sso-applications:write: Grants access to the 'etoro-public:sso-applications:write' scope. etoro-public:sso-scopes:read: Grants access to the 'etoro-public:sso-scopes:read' scope. etoro-public:sso-scopes:write: Grants access to the 'etoro-public:sso-scopes:write' scope. etoro-public:sub-accounts:read: Grants access to the 'etoro-public:sub-accounts:read' scope. etoro-public:sub-accounts:write: Grants access to the 'etoro-public:sub-accounts:write' scope. etoro-public:trade.demo:read: Grants access to the 'etoro-public:trade.demo:read' scope. etoro-public:trade.demo:write: Grants access to the 'etoro-public:trade.demo:write' scope. etoro-public:trade.real:read: Grants access to the 'etoro-public:trade.real:read' scope. etoro-public:trade.real:write: Grants access to the 'etoro-public:trade.real:write' scope. etoro-public:user-info:read: Grants access to the 'etoro-public:user-info:read' scope. etoro-public:watchlist:read: Grants access to the 'etoro-public:watchlist:read' scope. etoro-public:watchlist:write: Grants access to the 'etoro-public:watchlist:write' scope. ````