> ## Documentation Index > Fetch the complete documentation index at: https://docs.aiinsurance.io/llms.txt > Use this file to discover all available pages before exploring further. # Update Exposure > Updates a Field Model V1 exposure. The request body is a flat JSON object with field `referenceId`s as keys — the same shape as the create request. **This is a full replacement** of the exposure's field data, not a merge. Include all fields you want the exposure to have after the update. **Required permission:** `insured:update` ## OpenAPI ````yaml /openapi/generated-external-api.yaml put /api/v1/external/companies/{companyId}/exposures/{exposureId} openapi: 3.0.3 info: title: AI Insurance External API description: External API for AI Insurance platform version: 1.0.0 contact: email: support@aiinsurance.io servers: - url: https://app.aiinsurance.io description: Production security: - ApiKeyAuth: [] paths: /api/v1/external/companies/{companyId}/exposures/{exposureId}: put: tags: - Field Model Exposures summary: Update Exposure description: > Updates a Field Model V1 exposure. The request body is a flat JSON object with field `referenceId`s as keys — the same shape as the create request. **This is a full replacement** of the exposure's field data, not a merge. Include all fields you want the exposure to have after the update. **Required permission:** `insured:update` operationId: updateExposureV1 parameters: - $ref: '#/components/parameters/companyId' - name: exposureId in: path required: true schema: type: string format: uuid description: Exposure identifier requestBody: required: true content: application/json: schema: type: object additionalProperties: true description: >- Flat JSON object with field referenceIds as keys (full replacement) examples: updateFields: summary: Update exposure fields value: exposureName: Acme Corp (Updated) exposureType: business numberOfEmployees: 200 riskLevel: High responses: '200': description: Exposure updated successfully content: application/json: schema: $ref: '#/components/schemas/ExposureV1Detail' examples: success: summary: Updated exposure value: id: 550e8400-e29b-41d4-a716-446655440200 companyId: 550e8400-e29b-41d4-a716-446655440000 fieldModelV1Data: exposureName: Acme Corp (Updated) exposureType: business numberOfEmployees: 200 riskLevel: High createdAt: '2025-01-15T10:30:00.000Z' updatedAt: '2025-01-20T14:00:00.000Z' createdBy: google-oauth2|123456789 updatedBy: google-oauth2|987654321 '400': description: Bad Request - Validation error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: unknownField: summary: Unknown field referenceId value: error: code: InvalidFieldModelV1Data message: Unknown field 'badField' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': description: Exposure not found content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: exposureNotFound: summary: Exposure not found value: error: code: NOT_FOUND message: Exposure not found '500': $ref: '#/components/responses/InternalServerError' components: parameters: companyId: name: companyId in: path required: true schema: type: string format: uuid description: Company identifier schemas: ExposureV1Detail: type: object description: A Field Model V1 exposure entity with dynamic field data. required: - id - companyId - fieldModelV1Data properties: id: type: string format: uuid description: Exposure identifier companyId: type: string format: uuid description: Company identifier fieldModelV1Data: type: object additionalProperties: true description: | Dynamic field data for the exposure. Keys are field `referenceId`s defined in the company's field configuration. Includes base fields like `exposureName` and `exposureType` as well as any custom fields. policyIds: type: array items: type: string format: uuid deprecated: true description: >- Deprecated: always returns an empty array. FMV1 does not use the legacy policy_insureds join table. createdAt: type: string format: date-time nullable: true description: When the exposure was created updatedAt: type: string format: date-time nullable: true description: When the exposure was last updated createdBy: type: string nullable: true description: User ID who created the exposure updatedBy: type: string nullable: true description: User ID who last updated the exposure ErrorResponse: type: object description: Standard error response for all external API endpoints required: - error properties: error: type: object required: - code - message properties: code: type: string description: Machine-readable error code example: VALIDATION_ERROR message: type: string description: Human-readable error message example: 'submissionId: Required field is missing' details: type: array description: Additional details for validation errors (field-level errors) items: type: object properties: field: type: string description: The field that caused the error example: submissionId message: type: string description: Description of the field error example: Required field is missing responses: Unauthorized: description: Unauthorized - Invalid or missing API key content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: missingApiKey: summary: Missing API key value: error: code: UNAUTHORIZED message: Authorization header is required bearerTokenNotAllowed: summary: Bearer token used instead of API key value: error: code: UNAUTHORIZED message: External API endpoints require API key authentication Forbidden: description: Forbidden - Insufficient permissions content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: insufficientPermissions: summary: Insufficient permissions value: error: code: FORBIDDEN message: Insufficient permissions to perform this action InternalServerError: description: Internal Server Error - Unexpected error occurred content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: internalError: summary: Unexpected server error value: error: code: INTERNAL_ERROR message: An unexpected error occurred. Please try again later. securitySchemes: ApiKeyAuth: type: apiKey in: header name: Authorization description: >- API key authentication. Include your API key in the Authorization header. ````