Replace the institution's connector configuration
Replaces the connector type and the non-secret connector configuration of an existing institution. The stored sealed credentials are preserved untouched; a body carrying credential material is refused with 400 before any write (credentials are written only by PUT /v1/institutions//connector-credentials). The connector cache is invalidated on success. Returns 404 when the institution has no configuration.
Authorizations
JWT bearer token issued by the identity provider.
Path Parameters
The institution's unique identifier (UUID).
"550e8400-e29b-41d4-a716-446655440000"
Body
The connector's NON-SECRET configuration bag. REPLACES the stored bag wholesale (baseUrl and organizations[] always required; authAddress whenever credentials are stored), while the stored sealed credentials subtree is PRESERVED untouched. A credentials subtree, or any secret-bearing key (secret, token, password, api key, client id, ...) at any depth, is refused with 400 before any write: credentials are written only by PUT /v1/institutions/{institutionId}/connector-credentials.
The outbound connector type. Replaces the stored value; an unknown type is refused with 400.
1"midaz"
Response
OK
The outbound connector type for this institution.
"midaz"
RFC 3339 creation timestamp (UTC).
"2024-01-15T10:30:00Z"
Whether the connector configuration is active.
true
The institution's BACEN CNPJ (8 digits) for return-file headers and file header validation.
"12345678"
The institution's unique identifier (UUID).
"550e8400-e29b-41d4-a716-446655440000"
RFC 3339 last-update timestamp (UTC).
"2024-01-15T12:00:00Z"
The regular expression the institution declared for the account number of a court-indicated target; omitted when none is declared.
"^[0-9]{1,12}$"
The regular expression the institution declared for the branch (agência) number of a court-indicated target; omitted when none is declared.
"^[0-9]{4}$"
Connector-specific configuration bag. The non-secret connector-owned keys (baseUrl, authAddress, crmBaseUrl, crmMode, organizations[], blockableBalances, blockableAccountTypes, salaryAccountTypes) are preserved verbatim; secret-bearing keys — the whole credentials subtree included — are removed and never echoed. blockableBalances carries the LEDGER's balance-key values — for Midaz, balanceKey (default/overdraft/a client-registered key), not the available/onHold fields of a balance.
Present and false only when the stored connector metadata cannot be parsed by its connector; absent otherwise. The offending value is never echoed.
false
The CRM surface this institution resolves to (legacy|embedded): its own crmMode override when the connector metadata names one, the service-wide default otherwise. Derived and read-only; omitted when the connector metadata cannot be parsed.
legacy, embedded "legacy"
Operational retry policy (backoff/attempts) as arbitrary JSON.

