## Replace company contacts

`PUT /v1/companies/:id/contacts`

Defines the company's entire set of contacts in one call: links the contacts from the list and unlinks all others.

To add one contact without unlinking the others, use [`POST /v1/companies/:id/contacts`](/docs/entities/companies/contacts-create).

## Parameters

| Parameter | Type | Required | Description |
|----------|-----|:-----:|----------|
| `id` (path) | number | yes | Company ID. List: [`GET /v1/companies`](/docs/entities/companies/list) |

## Request fields (body)

| Field | Type | Required | Description |
|------|-----|:-----:|----------|
| `items` | array | yes | The new set of the company's contacts, including already linked contacts that must stay. Contacts missing from the array are unlinked. An empty array `[]` unlinks all contacts |
| `items[].contactId` | number | yes | Contact ID. List: [`GET /v1/contacts`](/docs/entities/contacts/list). A string of digits is also accepted, for example `"2991"` |
| `items[].isPrimary` | boolean | no | Ignored: replacing makes the company primary for every contact in `items`, and they have `isPrimary: true` in the response |
| `items[].sort` | number | no | The contact's position in the list. Defaults to `10` for the first item, `20` for the second, and so on |

## Examples

### curl — personal key

```bash
curl -X PUT "https://vibecode.bitrix24.com/v1/companies/3123/contacts" \
  -H "X-Api-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "items": [
      { "contactId": 2991, "sort": 10 },
      { "contactId": 2987, "sort": 20 }
    ]
  }'
```

### curl — OAuth application

```bash
curl -X PUT "https://vibecode.bitrix24.com/v1/companies/3123/contacts" \
  -H "X-Api-Key: YOUR_APP_KEY" \
  -H "Authorization: Bearer USER_SESSION_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "items": [
      { "contactId": 2991, "sort": 10 },
      { "contactId": 2987, "sort": 20 }
    ]
  }'
```

### JavaScript — personal key

```javascript
const res = await fetch('https://vibecode.bitrix24.com/v1/companies/3123/contacts', {
  method: 'PUT',
  headers: {
    'X-Api-Key': 'YOUR_API_KEY',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    items: [
      { contactId: 2991, sort: 10 },
      { contactId: 2987, sort: 20 },
    ],
  }),
})

const { success, data } = await res.json()
console.log('Contacts linked to the company:', data.length)
```

### JavaScript — OAuth application

```javascript
const res = await fetch('https://vibecode.bitrix24.com/v1/companies/3123/contacts', {
  method: 'PUT',
  headers: {
    'X-Api-Key': 'YOUR_APP_KEY',
    'Authorization': 'Bearer USER_SESSION_TOKEN',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    items: [
      { contactId: 2991, sort: 10 },
      { contactId: 2987, sort: 20 },
    ],
  }),
})

const { success, data } = await res.json()
```

## Response fields

| Field | Type | Description |
|------|-----|----------|
| `success` | boolean | Always `true` on success |
| `data` | array | All of the company's links after the replacement, in `sort` order. An empty array after `"items": []` |
| `data[].contactId` | number | Contact ID. Get the contact: [`GET /v1/contacts/:id`](/docs/entities/contacts/get) |
| `data[].isPrimary` | boolean | The company is primary for this contact: its ID arrives in the contact's `companyId` field |
| `data[].sort` | number | The contact's position in the list |
| `data[].roleId` | number | The contact's role in the company. The link methods do not save it |

## Response example

```json
{
  "success": true,
  "data": [
    { "contactId": 2991, "sort": 10, "isPrimary": true, "roleId": 0 },
    { "contactId": 2987, "sort": 20, "isPrimary": true, "roleId": 0 }
  ]
}
```

## Error response example

400 — the body has no `items` array:

```json
{
  "success": false,
  "error": {
    "code": "INVALID_PARAMS",
    "message": "items must be an array (use [] to unlink all)"
  }
}
```

## Errors

| HTTP | Code | Description |
|------|-----|----------|
| 400 | `INVALID_PARAMS` | `id` is not a positive integer |
| 400 | `INVALID_PARAMS` | `items` is missing or is not an array |
| 400 | `INVALID_PARAMS` | An `items` element is not an object. The message starts with the element index: `items[0] must be an object` |
| 400 | `INVALID_PARAMS` | An `items` element has no `contactId`, or `contactId` is not a positive integer. The message names the element index: `items[0] requires 'contactId'` |
| 404 | `ENTITY_NOT_FOUND` | No company with this `id` |
| 401 | `MISSING_API_KEY` | The `X-Api-Key` header is missing |
| 401 | `TOKEN_MISSING` | The API key has no Bitrix24 tokens configured |
| 403 | `SCOPE_DENIED` | The key has no `crm` scope |
| 403 | `WRITE_BLOCKED_READONLY_KEY` | The key is in read-only mode. Replacing requires a key with write access |
| 429 | `RATE_LIMITED` | Rate limit exceeded. Retry after the delay in the `Retry-After` header |
| 502 | `BITRIX_UNAVAILABLE` | Bitrix24 is unavailable. Retry the request later |

Full list of common API errors — [Errors](/docs/errors).

## Known specifics

- **The company becomes the contacts' primary company.** For every contact in `items`, including already linked ones, the `companyId` field returns the ID of this company, and the contact's link to its previous primary company gets `isPrimary: false`.
- **Contact existence is not checked.** An ID that does not belong to any contact is linked without an error and appears in the company's list of links. Before replacing, check the contacts with [`GET /v1/contacts/:id`](/docs/entities/contacts/get).
- **The role is not saved.** The `roleId` field in an `items` element is accepted without an error but is not saved: the new link has `roleId` equal to `0` in the response.

## See also

- [Company contacts](/docs/entities/companies/contacts)
- [List company contacts](/docs/entities/companies/contacts-list)
- [Link a contact to a company](/docs/entities/companies/contacts-create)
- [Unlink a contact from a company](/docs/entities/companies/contacts-delete-delete)
- [Unlink all contacts from a company](/docs/entities/companies/contacts-delete)
- [Contacts](/docs/entities/contacts)