Update an exhibitor

PUT/v1/event/{eventId}/exhibitors/{exhibitorId}

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

Update an existing exhibitor. Requires the write:exhibitors scope. Optionally send updated_at for optimistic concurrency control.

Request example

cURL

curl --request PUT \
  --url 'https://public-api.sessionboard.com/v1/event/{eventId}/exhibitors/{exhibitorId}' \
  --header 'x-access-token: <api-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "updated_at": "2026-01-15T09:30:00Z",
  "name": "<string>",
  "custom_fields": {},
  "translated_fields": [
    {
      "parent_field_internal_name": "<string>",
      "translated_language": "<string>",
      "value": null
    }
  ]
}'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/event/{eventId}/exhibitors/{exhibitorId}', {
  method: 'PUT',
  headers: {
    "x-access-token": "<api-token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "updated_at": "2026-01-15T09:30:00Z",
    "name": "<string>",
    "custom_fields": {},
    "translated_fields": [
      {
        "parent_field_internal_name": "<string>",
        "translated_language": "<string>",
        "value": null
      }
    ]
  }),
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "PUT",
    "https://public-api.sessionboard.com/v1/event/{eventId}/exhibitors/{exhibitorId}",
    headers={
        "x-access-token": "<api-token>",
        "Content-Type": "application/json"
    },
    json={
        "updated_at": "2026-01-15T09:30:00Z",
        "name": "<string>",
        "custom_fields": {},
        "translated_fields": [
            {
                "parent_field_internal_name": "<string>",
                "translated_language": "<string>",
                "value": None
            }
        ]
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/event/{eventId}/exhibitors/{exhibitorId}",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "PUT",
    CURLOPT_POSTFIELDS => '{
  "updated_at": "2026-01-15T09:30:00Z",
  "name": "<string>",
  "custom_fields": {},
  "translated_fields": [
    {
      "parent_field_internal_name": "<string>",
      "translated_language": "<string>",
      "value": null
    }
  ]
}',
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
        "Content-Type: application/json",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
  "strings"
)

func main() {
  req, _ := http.NewRequest("PUT", "https://public-api.sessionboard.com/v1/event/{eventId}/exhibitors/{exhibitorId}", strings.NewReader(`{
  "updated_at": "2026-01-15T09:30:00Z",
  "name": "<string>",
  "custom_fields": {},
  "translated_fields": [
    {
      "parent_field_internal_name": "<string>",
      "translated_language": "<string>",
      "value": null
    }
  ]
}`))
  req.Header.Add("x-access-token", "<api-token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/event/{eventId}/exhibitors/{exhibitorId}"))
    .header("x-access-token", "<api-token>")
    .header("Content-Type", "application/json")
    .method("PUT", HttpRequest.BodyPublishers.ofString("{\n  \"updated_at\": \"2026-01-15T09:30:00Z\",\n  \"name\": \"<string>\",\n  \"custom_fields\": {},\n  \"translated_fields\": [\n    {\n      \"parent_field_internal_name\": \"<string>\",\n      \"translated_language\": \"<string>\",\n      \"value\": null\n    }\n  ]\n}"))
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

eventId*

exhibitorId*

Body application/json

{ "updated_at": "2026-01-15T09:30:00Z", "name": "<string>", "custom_fields": {}, "translated_fields": [ { "parent_field_internal_name": "<string>", "translated_language": "<string>", "value": null } ] }

PUT

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• eventIdintegerpathrequired

  The event ID.

• exhibitorIdstringpathrequired

  The exhibitor ID.

Request body

application/jsonrequired

• updated_atstring<date-time>

  Optional optimistic concurrency control. Send the updated_at value from the last-fetched exhibitor.

• namestring

  New exhibitor name. When present it must be a non-empty string — an explicit empty string returns 400. Omit the key to leave the name unchanged.

• custom_fieldsobject

  Custom field values keyed by field internal name.

  For number, currency, and percent fields, an empty string ("") clears the stored value — identical to sending null. 0 and "0" store an actual zero.

  For checkbox fields, send boolean true or false. On read, a checked box serializes as the string "Yes", an explicitly unchecked one as "No", and a box that was never set as null.

  Fields owned by an integration (for example swoogo_session_id, cvent_session_id, visit_session_id) are hydrated by the connector and reject writes with 400 FIELD_READ_ONLY, naming the field in details.field. Omit them from custom_fields.

• translated_fieldsTranslatedFieldWrite[]

  Language variants to write using the same shape returned on reads. Omit this key on update to leave existing translations unchanged.

  Show child attributes

  • parent_field_internal_namestringrequired
  • translated_languagestringrequired

    Locale code for the language variant (for example fr or ar). Must be enabled on the event; otherwise the request fails with 400.

  • valueany

    Value for that locale. Same type as the parent field.

Example

{
  "updated_at": "2026-01-15T09:30:00Z",
  "name": "<string>",
  "custom_fields": {},
  "translated_fields": [
    {
      "parent_field_internal_name": "<string>",
      "translated_language": "<string>",
      "value": null
    }
  ]
}

Responses

200application/json

Exhibitor updated

An exhibitor associated with an event.

• idstring
• friendly_idstring
• friendly_id_rawinteger
• namestring
• descriptionstring
• logo_image_urlstring
• banner_image_urlstring
• phonestring
• address_line_1string
• address_line_2string
• address_citystring
• address_statestring
• address_postal_codestring
• address_coutnrystring

  Country (note: field name contains a known typo preserved for backwards compatibility).

• facebook_urlstring
• instagram_urlstring
• linkedin_urlstring
• snapchat_usernamestring
• tiktok_usernamestring
• twitter_urlstring
• website_urlstring
• created_atstring
• updated_atstring<date-time>

  When the exhibitor last changed, from any source, including Public API creates, updates and bulk writes. Send it back as updated_at on an update for optimistic concurrency; the write returns the new value.

• custom_fieldsCustomFieldValue[]
  Show child attributes

  • idstring
  • namestring
  • valuestring | boolean | null

    The formatted field value, or null when the field is empty. Numeric field types (number, currency, percent, quantity, formula) serialize a stored zero as its formatted value (for example "0") — null means the field has no value, not that the value is zero.

    checkbox fields serialize as the strings "Yes" (checked) and "No" (explicitly unchecked); a checkbox that was never set is null. Writes take boolean true / false.

    datetime fields serialize as ISO 8601. On event custom fields (GET /v1/events?expand=custom_fields) the value is event-local time with the event's UTC offset (for example 2026-08-15T09:00:00-03:00), falling back to the raw UTC instant (2026-08-15T12:00:00.000Z) when the event has no valid timezone. On session, speaker, sponsor, and exhibitor custom fields the value is the raw UTC instant.

    date (date-only) fields serialize as M-DD-YYYY: month without a leading zero, day with one, four-digit year (for example 9-22-2026 for 22 September 2026, 3-04-2026 for 4 March 2026). This is not ISO 8601; parse it with that exact pattern.

  • typestring
  • internal_namestring
  • created_atstring
• translated_fieldsTranslatedField[]
  Show child attributes

  • idstring
  • namestring
  • typestring
  • parent_field_idstring
  • parent_field_sourcestring
  • parent_field_namestring
  • parent_field_internal_namestring
  • translated_languagestring
  • valuestring
• contactsAccountContact[]
  Show child attributes

  • idstring
  • friendly_idstring
  • friendly_id_rawinteger
  • full_namestring
  • first_namestring
  • last_namestring
  • emailstring
  • photo_urlstring

    URL of the contact's headshot. Images larger than 2 MB are delivered resized from this URL, scaled to fit within 2400 x 2400 pixels (a PNG may arrive as WebP for clients that accept it). The uploaded file is stored unchanged; for full-resolution originals use the bulk download tools in Sessionboard, such as Download Headshots (Contacts, More menu).

  • company_namestring
  • titlestring
  • aboutstring
  • is_primaryboolean
  • contact_created_atstring
  • contact_updated_atstring
  • relationship_created_atstring
  • relationship_updated_atstring
• admin_urlstring<uri> | null

  Deep link to this entity in the Sessionboard admin UI.

400

Validation error — name, when present, must be a non-empty string

401

Unauthorized

403

Missing write:exhibitors scope

404

No exhibitor with this id on this event. A record that exists but does not hold the exhibitor role — a contact, or a group linked only as the other role — is also a 404 here; look it up on the endpoint for the role it holds.

409

Stale update — exhibitor modified since last fetch

Response examples

200

{
  "id": "4b1de9c7-88a2-4e0f-b1f3-6a9d0c2e4f22",
  "friendly_id": "EXH-8",
  "name": "Initech Booth Services",
  "custom_fields": []
}