> ## Documentation Index > Fetch the complete documentation index at: https://api-portal.etoro.com/llms.txt > Use this file to discover all available pages before exploring further. # Update KYC Personal Details > **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Updates the authenticated user's KYC personal details. Supports partial updates - any subset of the fields may be supplied and omitted fields are left unchanged. Tax identifications are supplied via taxIds[] and support multiple jurisdictions; when present, taxIds[] replaces the full set of tax identifications on the user record. The deprecated single taxId/taxIdCountry fields are still accepted for backward compatibility and are used only when taxIds[] is absent. Tax-id number format is validated per country by the upstream KYC service. ## OpenAPI ````yaml /api-reference/partners-openapi.json put /api/v1/users/personaldetails openapi: 3.0.1 info: title: eToro Api version: v1.342.0 description: >- eToro’s public API provides access to real-time financial data, trading insights, and account management features, allowing developers to integrate eToro’s services into their applications. With access to market prices, historical data, and social trading information, the API empowers users to enhance their trading strategies. Designed for security and scalability, the eToro API ensures smooth and reliable integration for a variety of financial applications. For more details on integrating with eToro's public WebSocket service, please refer to the dedicated [WebSocket documentation](./websocket/websocket-doc.html). ## Authentication Every request must be authenticated with exactly one of two options: an OAuth 2.0 access token (`Authorization: Bearer `), or the non-interactive credential pair (`x-api-key` + `x-user-key` headers). The two options are mutually exclusive — a request carrying both is rejected. Each operation lists the OAuth scopes that grant access as alternative security requirements: a bearer token needs only ONE of them, and the same permissions govern the credential pair. servers: - url: https://public-api.etoro.com description: eToro Public API - Partners security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: [] tags: - name: OPS - name: KYC - name: Cash Accounts - name: FTD - name: Crypto Deposit - name: Crypto Withdrawals - name: Registration - name: Sub-Accounts - name: Email Verification - name: Trusted Partner - name: Phone Verification - name: Verification paths: /api/v1/users/personaldetails: put: tags: - KYC summary: Update KYC Personal Details description: >- **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Updates the authenticated user's KYC personal details. Supports partial updates - any subset of the fields may be supplied and omitted fields are left unchanged. Tax identifications are supplied via taxIds[] and support multiple jurisdictions; when present, taxIds[] replaces the full set of tax identifications on the user record. The deprecated single taxId/taxIdCountry fields are still accepted for backward compatibility and are used only when taxIds[] is absent. Tax-id number format is validated per country by the upstream KYC service. operationId: UpdateKycPersonalDetails parameters: - name: x-request-id in: header required: true schema: type: string format: uuid example: 33f4e5af-764c-4624-9d1e-fbbed9bd13ce description: A unique request identifier. requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/PersonalDetailsUpdate' example: firstName: John lastName: Doe dateOfBirth: '1990-01-01' citizenshipCountry: DE taxIds: - taxId: IL311111118 country: IL primary: false - taxId: '44892353279' country: DE primary: true responses: '200': description: >- KYC personal details updated successfully. Returns the full personal-details record after the update. content: application/json: schema: $ref: '#/components/schemas/PersonalDetails' headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 '400': description: Structural validation failed for taxIds[]. content: application/json: schema: $ref: '#/components/schemas/KycFacadeApi_ErrorResponse' examples: MissingRequiredField: summary: An entry is missing taxId or country value: errorCode: MISSING_REQUIRED_FIELD errorMessage: taxIds[].taxId is required TooManyTaxIds: summary: More than 10 tax identifications supplied value: errorCode: TOO_MANY_TAX_IDS errorMessage: taxIds must not contain more than 10 items '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/KycFacadeApi_ErrorResponse' '422': description: >- Business validation failed, or the upstream KYC service rejected a tax identification (e.g. invalid number format, or missing residence-country tax id). content: application/json: schema: $ref: '#/components/schemas/KycFacadeApi_ErrorResponse' examples: DuplicateTaxIdCountry: summary: Two entries for the same country value: errorCode: DUPLICATE_TAX_ID_COUNTRY errorMessage: >- taxIds must not contain more than one entry for the same country MultiplePrimaryTaxIds: summary: More than one entry flagged primary value: errorCode: MULTIPLE_PRIMARY_TAX_IDS errorMessage: Only one tax identification may be marked as primary InvalidTaxIdCountry: summary: Unknown ISO 3166-1 alpha-2 country code value: errorCode: INVALID_TAX_ID_COUNTRY errorMessage: >- taxIds[].country 'XX' is not a valid ISO 3166-1 alpha-2 country code UpstreamRejected: summary: Upstream KYC service rejected a tax identification value: errorCode: UPSTREAM_REJECTED errorMessage: The Tax Id without reason format is not valid. '429': description: >- Too Many Requests — the shared rate limit (60 requests / 60s) was exceeded. headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 Retry-After: description: Seconds to wait before retrying. schema: type: integer example: 60 '500': description: >- The request could not be completed due to an unexpected error, typically an upstream KYC service failure (outage, timeout, or circuit open). content: application/json: schema: $ref: '#/components/schemas/KycFacadeApi_ErrorResponse' example: errorCode: UserApiDependencyFailed errorMessage: UserApi dependency failed security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: - etoro-public:verification.personaldetails:write components: schemas: PersonalDetailsUpdate: type: object description: >- Partial-update payload for KYC personal details. Any subset of these fields may be supplied; omitted fields are left unchanged. The gcid is taken from the authenticated session and is not accepted in the body. properties: firstName: type: string description: The user's first name. middleName: type: string nullable: true description: The user's middle name (optional). lastName: type: string description: The user's last name. gender: type: integer description: 'Gender code. Values: 0=Unspecified, 1=Male, 2=Female, 3=Other.' dateOfBirth: type: string format: date description: The user's date of birth (ISO 8601, YYYY-MM-DD). placeOfBirthCountry: type: string description: ISO 3166-1 alpha-2 country code of the user's place of birth. example: US citizenshipCountry: type: string description: ISO 3166-1 alpha-2 country code of the user's primary citizenship. example: US personalIdentification: $ref: '#/components/schemas/PersonalIdentification' taxIds: type: array description: >- Tax identifications for the user. Supports multiple jurisdictions. When supplied, this replaces the full set of tax identifications on the user record and takes precedence over the deprecated single taxId/taxIdCountry fields. At most one entry may be flagged primary; at most 10 entries; one entry per country. items: $ref: '#/components/schemas/TaxIdEntry' taxId: type: string deprecated: true description: >- Deprecated. Use taxIds[]. Accepted only when taxIds[] is absent. Retained for backward compatibility. taxIdCountry: type: string deprecated: true description: >- Deprecated. Use taxIds[]. ISO 3166-1 alpha-2 country code of the deprecated single tax identification. Retained for backward compatibility. example: DE additionalCitizenship: $ref: '#/components/schemas/AdditionalCitizenship' PersonalDetails: type: object description: Full KYC personal-details record for the authenticated user. properties: gcid: type: integer format: int64 description: The user's global customer identifier. firstName: type: string description: The user's first name. middleName: type: string nullable: true description: The user's middle name (optional). lastName: type: string description: The user's last name. gender: type: integer description: 'Gender code. Values: 0=Unspecified, 1=Male, 2=Female, 3=Other.' dateOfBirth: type: string format: date description: The user's date of birth (ISO 8601, YYYY-MM-DD). placeOfBirthCountry: type: string description: ISO 3166-1 alpha-2 country code of the user's place of birth. example: US citizenshipCountry: type: string description: ISO 3166-1 alpha-2 country code of the user's primary citizenship. example: US personalIdentification: $ref: '#/components/schemas/PersonalIdentification' taxIds: type: array description: >- All tax identifications held by the user, one entry per issuing country. items: $ref: '#/components/schemas/TaxIdentification' taxId: type: string deprecated: true description: >- Deprecated. Use taxIds[]. Mirrors the primary tax identification number. Retained for backward compatibility. taxIdCountry: type: string deprecated: true description: >- Deprecated. Use taxIds[]. ISO 3166-1 alpha-2 country code of the primary tax identification. Retained for backward compatibility. example: DE additionalCitizenship: $ref: '#/components/schemas/AdditionalCitizenship' KycFacadeApi_ErrorResponse: type: object properties: errorCode: type: string errorMessage: type: string PersonalIdentification: type: object description: A personal identification document (e.g. national ID, passport). properties: type: type: string description: >- Identification document type (e.g. "NationalId", "Passport", "DriverLicense"). Exact value set is defined by the KYC facade. value: type: string description: The identification number / document value. issuingCountry: type: string description: ISO 3166-1 alpha-2 country code of the issuing jurisdiction. example: US TaxIdEntry: type: object description: >- A tax identification supplied on update. One entry per issuing country; at most one may be primary. properties: taxId: type: string description: >- The tax identification number. Format is validated per country by the upstream KYC service. country: type: string description: ISO 3166-1 alpha-2 country code of the issuing jurisdiction. example: DE primary: type: boolean description: >- Whether this is the primary tax identification. At most one entry may be primary. AdditionalCitizenship: type: object description: A secondary citizenship held by the user. properties: countryCode: type: string description: ISO 3166-1 alpha-2 country code of the additional citizenship. example: GB personalIdentification: $ref: '#/components/schemas/PersonalIdentification' TaxIdentification: type: object description: A tax identification returned on read. properties: taxId: type: string description: The tax identification number. country: type: string description: ISO 3166-1 alpha-2 country code of the issuing jurisdiction. example: DE primary: type: boolean description: >- Whether this is the primary tax identification. Inferred: the entry whose country matches the user's citizenship is primary; otherwise the first entry. securitySchemes: apiKeyAuth: type: apiKey in: header name: x-api-key description: >- API key of the application. Only valid together with the x-user-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. The pair is granted the same permissions the operation's OAuth scopes describe. Demo credential for trying the API from these docs: `lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663` x-default: lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663 userKeyAuth: type: apiKey in: header name: x-user-key description: >- User-specific authentication key. Only valid together with the x-api-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. Demo credential for trying the API from these docs: `eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_` x-default: >- eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_ oauth2: type: oauth2 description: >- eToro OAuth2 — send the access token as `Authorization: Bearer `. Each operation lists the scopes that grant access as separate `security` requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. Mutually exclusive with the x-api-key/x-user-key credential pair: never send both. flows: authorizationCode: authorizationUrl: '' tokenUrl: '' scopes: etoro-public:demo:read: Grants access to the 'etoro-public:demo:read' scope. etoro-public:kyc:answers:read: Grants access to the 'etoro-public:kyc:answers:read' scope. etoro-public:kyc:answers:write: Grants access to the 'etoro-public:kyc:answers:write' scope. etoro-public:kyc:questions:read: Grants access to the 'etoro-public:kyc:questions:read' scope. etoro-public:kyc:read: Grants access to the 'etoro-public:kyc:read' scope. etoro-public:kyc:regulations:read: Grants access to the 'etoro-public:kyc:regulations:read' scope. etoro-public:kyc:write: Grants access to the 'etoro-public:kyc:write' scope. etoro-public:money.accounts:read: Grants access to the 'etoro-public:money.accounts:read' scope. etoro-public:money.accounts:write: Grants access to the 'etoro-public:money.accounts:write' scope. etoro-public:money.deposit.crypto:read: >- Grants access to the 'etoro-public:money.deposit.crypto:read' scope. etoro-public:money.deposit.crypto:write: >- Grants access to the 'etoro-public:money.deposit.crypto:write' scope. etoro-public:money.ftd:read: Grants access to the 'etoro-public:money.ftd:read' scope. etoro-public:money.ftd:write: Grants access to the 'etoro-public:money.ftd:write' scope. etoro-public:money.withdraw.crypto:read: >- Grants access to the 'etoro-public:money.withdraw.crypto:read' scope. etoro-public:money.withdraw.crypto:write: >- Grants access to the 'etoro-public:money.withdraw.crypto:write' scope. etoro-public:partner-default: Grants access to the 'etoro-public:partner-default' scope. etoro-public:partner:registration:read: >- Grants access to the 'etoro-public:partner:registration:read' scope. etoro-public:partner:registration:write: >- Grants access to the 'etoro-public:partner:registration:write' scope. etoro-public:real:read: Grants access to the 'etoro-public:real:read' scope. etoro-public:sub-accounts:delete: Grants access to the 'etoro-public:sub-accounts:delete' scope. etoro-public:verification.address:read: >- Grants access to the 'etoro-public:verification.address:read' scope. etoro-public:verification.address:write: >- Grants access to the 'etoro-public:verification.address:write' scope. etoro-public:verification.email:write: >- Grants access to the 'etoro-public:verification.email:write' scope. etoro-public:verification.personaldetails:read: >- Grants access to the 'etoro-public:verification.personaldetails:read' scope. etoro-public:verification.personaldetails:write: >- Grants access to the 'etoro-public:verification.personaldetails:write' scope. etoro-public:verification.phone:write: >- Grants access to the 'etoro-public:verification.phone:write' scope. etoro-public:verification.trusted.email:write: >- Grants access to the 'etoro-public:verification.trusted.email:write' scope. etoro-public:verification.trusted.phone:write: >- Grants access to the 'etoro-public:verification.trusted.phone:write' scope. etoro-public:verification:trusted:user:write: >- Grants access to the 'etoro-public:verification:trusted:user:write' scope. ````