ACR referenceAccount product actions

updateAccountSoulSurfaceVisibility

ACR Dashboard
POST
/v1/account/actions/updateAccountSoulSurfaceVisibility

Account Personal only; current actor, canonical surface and ownership remain authoritative. Explicit Team selection is rejected without fallback. No automatic mutation retry or invented replay journal.

Authorization

bearerAuth
AuthorizationBearer <token>

Organization-scoped bearer credential. Credentials are scoped, revocable, and never represented by a Soul or operation ID.

In: header

Header Parameters

Idempotency-Key*string

Canonical action UUID; mutation retries reuse this key. Reads also require a UUID at the machine transport boundary.

Formatuuid
X-Kallfi-Workspace-ID?string

Untrusted explicit workspace UUID. Omitted selects Personal. Workspace commands require current membership, role, surface and grant; explicit denied selection never falls back. Account-owned commands reject a nonpersonal selected workspace. One Account surface key spans currently authorized workspaces; selecting a workspace never issues another key.

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

curl -X POST "https://acr.kallfi.red/v1/account/actions/updateAccountSoulSurfaceVisibility" \  -H "Idempotency-Key: 497f6eca-6276-4993-bfeb-53cbbbba6f08" \  -H "Content-Type: application/json" \  -d '{    "body": {      "entityId": "156e622c-6cdf-4c27-9bc9-2f2db69919f5",      "webSurfaceVisibility": "com",      "expectedWebSurfaceVisibility": "com"    }  }'
{  "entity": {    "entityId": "156e622c-6cdf-4c27-9bc9-2f2db69919f5",    "handle": "string",    "displayName": "string",    "bio": "string",    "status": "string",    "webSurfaceVisibility": "com"  }}