> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usefini.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update data step

> Update one Data Step.

Updates one [`Data Step`](/en/api-reference/actions-and-attributes#data-step-object). All fields are optional; send only what you want to change.

<Note>
  Sensitive header and body values are preserved when you echo the masked `"********"` back. Send a new string to replace a secret. See [Sensitive values and masking](/en/api-reference/actions-and-attributes#sensitive-values-and-masking).
</Note>

## Headers

<ParamField header="Authorization" type="string" required>
  Bearer token containing your Fini workspace API key. Format: `Bearer fini_...` The key needs `write` scope.
</ParamField>

<ParamField header="Content-Type" type="string" required>
  `application/json`
</ParamField>

## Path parameters

<ParamField path="id" type="string" required>
  Data Step ID to update.
</ParamField>

## Body parameters

<ParamField body="name" type="string">
  Updated step name.
</ParamField>

<ParamField body="requestUrl" type="string">
  Updated request URL.
</ParamField>

<ParamField body="requestMethod" type="string">
  Updated HTTP verb.
</ParamField>

<ParamField body="requestHeaders" type="object">
  Updated request headers. Echo the masked value back to keep a stored secret.
</ParamField>

<ParamField body="requestBody" type="object">
  Updated request body, with the same masking behavior as headers.
</ParamField>

<ParamField body="responseMapping" type="ResponseMapping">
  Updated output mapping. See [ResponseMapping](/en/api-reference/actions-and-attributes#responsemapping-object).
</ParamField>

## Response

Returns the updated [`Data Step`](/en/api-reference/actions-and-attributes#data-step-object) with sensitive values masked.

## Errors

<AccordionGroup>
  <Accordion title="400 Bad Request" icon="circle-exclamation">
    The body is malformed.
  </Accordion>

  <Accordion title="401 Unauthorized" icon="lock">
    The API key is missing, malformed, revoked, or invalid.
  </Accordion>

  <Accordion title="403 Forbidden" icon="shield-halved">
    The API key does not include the `write` scope required for this route.
  </Accordion>

  <Accordion title="500 Internal Server Error" icon="triangle-exclamation">
    Fini failed while updating the Data Step, for example when the ID does not exist.
  </Accordion>
</AccordionGroup>