> ## Documentation Index > Fetch the complete documentation index at: https://docs.kealinks.com/llms.txt > Use this file to discover all available pages before exploring further. # Repoint a link > Changes where an already-printed code goes. The new destination is re-scanned, the link returns to quarantine and its verification count resets — a check banked against the old destination cannot release the new one. Free accounts can do this; cancelled accounts cannot. ## OpenAPI ````yaml /openapi.json patch /api/links/{id} openapi: 3.1.0 info: title: kealink API version: '2026-08-21' description: >- Permanent link shortening and dynamic QR codes. **A code we issue never stops resolving.** Not when the destination changes, not when a subscription lapses, not when the link is archived. Customers print these on physical materials, so a dead redirect is a reprint bill. Every design decision below follows from that. ### Authentication Send an API key as `Authorization: Bearer klk_...`. Mint one with `POST /api/billing/claim`. Keys are stored hashed and shown exactly once. ### Paying as an agent You do not need an account. `POST /api/links` with no credentials answers `402` with a machine-payment challenge — MPP (`WWW-Authenticate: Payment`) and x402 (`PAYMENT-REQUIRED`) on the same response. Pay either one, retry, and you get a permanent link plus an API key to repoint it with later. ### Errors Always `{ "error": "a sentence" }` with a real status code. `402` means this action needs payment — never that existing links stopped working. contact: name: kealink support url: https://kealinks.com servers: - url: https://api.kealinks.com description: Production security: [] tags: - name: Links description: Create and repoint permanent codes. - name: QR codes description: Print-ready artwork for a link. - name: Analytics description: Scans and clicks, by day, country, device or referrer. - name: Domains description: Serve your codes on your own hostname. - name: Account description: Tier, quota and what this account may do. - name: Billing description: Subscription lifecycle. - name: Team description: Workspaces and members. - name: Machine payments description: Buy a permanent link with no account, over MPP or x402. Built for agents. - name: Meta description: Discovery and health. paths: /api/links/{id}: patch: tags: - Links summary: Repoint a link description: >- Changes where an already-printed code goes. The new destination is re-scanned, the link returns to quarantine and its verification count resets — a check banked against the old destination cannot release the new one. Free accounts can do this; cancelled accounts cannot. operationId: updateLink parameters: - name: id in: path required: true description: The link id returned when the link was created. schema: type: string examples: - lnk_2YgQk1p8fT3mN7wCxRvBdLsHjZa requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/UpdateLinkRequest' responses: '200': description: The destination was changed. content: application/json: schema: $ref: '#/components/schemas/LinkUpdated' '400': description: The request body or query string did not validate. content: application/json: schema: $ref: '#/components/schemas/Error' '401': description: Missing or invalid credentials. content: application/json: schema: $ref: '#/components/schemas/Error' '402': description: >- Your subscription is inactive, so links cannot be edited. Existing links keep resolving in every account state, including cancelled. content: application/json: schema: $ref: '#/components/schemas/Error' '404': description: No link with that id on this account. content: application/json: schema: $ref: '#/components/schemas/Error' '422': description: The new destination failed a safety check. content: application/json: schema: $ref: '#/components/schemas/Error' security: - bearerAuth: [] components: schemas: UpdateLinkRequest: type: object properties: destination: type: string minLength: 1 description: >- Where the code resolves to. http/https only; localhost, private ranges and cloud metadata endpoints are refused. Stored normalised, so `HTTPS://Example.COM` and `https://example.com/` are the same link. format: uri examples: - https://example.com/spring-menu required: - destination additionalProperties: false description: >- Repointing a printed code is the product. Any destination change re-runs the safety check and returns the link to quarantine — a new destination is unproven however well the old one behaved. LinkUpdated: type: object properties: id: type: string destination: type: string minLength: 1 description: >- Where the code resolves to. http/https only; localhost, private ranges and cloud metadata endpoints are refused. Stored normalised, so `HTTPS://Example.COM` and `https://example.com/` are the same link. format: uri examples: - https://example.com/spring-menu required: - id - destination additionalProperties: false Error: type: object properties: error: type: string description: A sentence you can show a human. Never a code to switch on. examples: - Your subscription is inactive. Existing links keep resolving. required: - error additionalProperties: false description: >- Every failure returns this shape with a real status code. 402 specifically means 'inactive subscription, existing links still work' — the message says so. securitySchemes: bearerAuth: type: http scheme: bearer description: >- An API key (`klk_...`) or a Clerk session token. Both resolve to the same account and behave identically. ````