POST

Appointments.Edit

Update a staff CRM doctor appointment (reschedule, branch_status, patient fields, paid/cancel flags). Org-scoped by owner_id. Alias: Appointments.Update.

Permissions

User must be logged in with a valid bearer token.
The user must be from the same company domain as the request Host (call the API on that account subdomain or allowed custom domain). A token from another company returns success=0, error user_not_in_company.
Returned or changed records are limited by the user permissions, team access, folder access, and account settings.

Action

Updates the requested Appointments record after validating permissions and input fields.

Push Service

No push is sent because this function only reads data or returns helper information.

Automation

No automation is run for this function.

Special Instructions

On a company subdomain (e.g. https://{user_domain}.bull36.com) the user must match that Host — Login and protected APIs reject another company with success=0, error user_not_in_company. On a main brand host (bull36.com, biz1.co.il, mastrocrm.com, …) the company domain gate is skipped.
Staff token required. Does not use Customer.Appointments.Edit cust_id lock.
branch_status: 0=Came to branch, 1=Enter, 2=Finished.

Required Parameters

Name	Type	Sample	Explanation
`id` post	int	`6550636`	Appointment id. Aliases: data_id, appointment_id, doctor_appointment_for_cust_id.

Optional Parameters

Name	Type	Sample	What it gives
`date` post	date	`2026-10-14`	New date. Send date filters and date values as UTC Y-m-d H:i:s when the route accepts date/time; date-only table columns store the Y-m-d date part.
`start_time` post	string	`10:00`	New start HH:MM.
`end_time` post	string	`10:30`	New end HH:MM.
`doctor_id` post	int	`211`	Doctor / team member.
`branch` post	int	`38`	Branch id.
`branch_status` post	int	`1`	0/1/2 branch visit status.
`appointments_type_id` post	int	`699`	Type id.
`patient_name` post	string	`John`	Patient name.
`notes` post	string		Notes.
`paid_status` post	int	`0`	Paid flag.
`cancle_status` post	int	`0`	Cancel flag. Alias: cancel_status.

Authentication

Send the bearer token returned by Login in the request header. The user must be from the same company domain as this Host — a token from another company is rejected (user_not_in_company).

Authorization: Bearer YOUR TOKEN

Sample Request

{
    "url": "\/app\/Appointments.Edit",
    "method": "POST",
    "headers": {
        "Authorization": "Bearer YOUR TOKEN"
    },
    "body": {
        "id": "6550636",
        "branch_status": "1",
        "start_time": "10:00",
        "end_time": "10:30"
    },
    "url_user": "https:\/\/{user}.bull36.com\/app\/Appointments.Edit",
    "url_domain": "https:\/\/{domain}\/app\/Appointments.Edit"
}

Endpoint

POST /app/Appointments.Edit
POST https://{user}.bull36.com/app/Appointments.Edit
POST https://{domain}/app/Appointments.Edit

Sample Output

{
    "success": 1,
    "message": "Appointment edit successfully...!",
    "id": 6550636
}

JavaScript Example

const token = 'YOUR TOKEN';
const body = new URLSearchParams();
body.set('id', '6550636');
body.set('branch_status', '1');
body.set('start_time', '10:00');
body.set('end_time', '10:30');

const res = await fetch('/app/Appointments.Edit', {
  method: 'POST',
  headers: { Authorization: `Bearer ${token}` },
  body
});
const data = await res.json();
console.log(data);

Error Example

{
    "success": 0,
    "message": "No_data_found"
}