# Update alert policy

`PATCH https://api.endless.app/organizations/{organization_id}/alert-policy`

Source: https://endless.app/docs/api/alert-policy/update

Updates an alert policy and returns the updated row. Scoped to the organization named by `organization_id`. Send a sparse body — only the fields that changed. Each field is authorized on its own, so resending an unchanged one also demands its permission.

## Authentication

- `bearerAuth`: HTTP bearer (JWT)

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `organization_id` | path | string | yes |  |
| `Endless-Api-Version` | header | string | no | Pin the caller to an API major (`1`). Omit to accept the current version. A major this deployment cannot serve is refused with 400 `unsupported_api_version`. |

## Request body

Required.

Content type: `application/json` — object

- `enabled` (boolean, required)
- `always_ask_above_enabled` (boolean, required)
- `always_ask_above_credits` (integer, required)
- `auto_accept_below_enabled` (boolean, required)
- `auto_accept_below_credits` (integer, required)
- `default_action` ("accept" | "decline", required)
- `countdown_seconds` (integer, required)

## Responses

### 200 OK

Content type: `application/json` — object

- `enabled` (boolean, required)
- `always_ask_above_enabled` (boolean, required)
- `always_ask_above_credits` (integer, required)
- `auto_accept_below_enabled` (boolean, required)
- `auto_accept_below_credits` (integer, required)
- `default_action` ("accept" | "decline", required)
- `countdown_seconds` (integer, required)

### Errors

- `400` (Error): The request is malformed, or failed input validation. `message` names the field and the rule it broke; `data.issues` carries them individually.
- `401` (Error): No bearer token, or a token that failed verification.
- `402` (Error): The workspace has no credits left, or the caller is over a spending limit.
- `403` (Error): Authenticated, but the caller's role in this workspace does not carry the permission this operation needs.
- `404` (Error): No resource with that id, or the caller cannot read it. The two are deliberately one answer, so an id cannot be probed for existence.
- `409` (Error): The request is well-formed, but the resource's current state forbids it — a taken name, a last admin, a limit already reached.
- `429` (Error): The caller has spent its rate-limit window. `Retry-After` says when to come back.
- `500` (Error): The request failed on our side. Safe to retry an idempotent operation with backoff.