Update Library Content

Endpoint used to partially update a standalone content in the institution library. All body fields are optional; only sent fields are updated. The content type cannot be changed after creation.

Note: This endpoint is served by Toolzz LXP API (Encore library service), not by the institution monolith domain. Use the LXP API base URL (e.g. https://lxp.prod.api.toolzz.media).

Warning: Requires a valid admin JWT. Users with student privilege (privilegio_id = 4) cannot manage library content.

Request Example

curl --request PATCH \
  --url 'https://lxp.prod.api.toolzz.media/institution/library/contents/1234567' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
    "title": "Updated title",
    "description": "Updated description",
    "difficultyLevel": "hard",
    "tags": "updated,guide",
    "status": 1
  }'

Response Example

{
  "content": {
    "id": 1234567,
    "institutionId": 39955387,
    "userId": 98210156,
    "title": "Updated title",
    "description": "Updated description",
    "type": "text",
    "monolithType": 1,
    "status": 1,
    "body": "<p>Welcome to the library</p>",
    "fileUrl": null,
    "videoUrl": null,
    "duration": 0,
    "thumbnailUrl": null,
    "catalogCoverRectangularUrl": null,
    "cycleIds": [179],
    "cycleStageIds": [],
    "disciplineIds": [],
    "schoolIds": [],
    "difficulty": "hard",
    "tags": "updated,guide",
    "source": null,
    "authors": null,
    "disablePlayerControls": false,
    "showInStudentCatalog": false,
    "showInVisitorCatalog": false,
    "blockCatalogLoggedOut": false,
    "showCourseDetails": false,
    "showInRelatedVideos": false,
    "videoOrientation": null,
    "createdAt": "2026-06-15T12:00:00.000Z",
    "updatedAt": "2026-06-15T14:30:00.000Z"
  }
}

Request description

Access Token

Parameter	Type	Description	Required
`Authorization`	String	JWT access token (`Bearer <token>`). Must include `institutionId`, `userID`, and `subdomain`.	Yes

URL Parameters (Path)

Parameter	Type	Description	Required
`id`	number	Unique content identifier (positive integer).	Yes

Body Parameters (all optional)

Parameter	Type	Description
`title`	string	Content title. Cannot be empty if provided.
`description`	string	Content description.
`body`	string	HTML content (for `text` and `html5`).
`videoUrl`	string	External video URL (for `video_online`).
`fileUrl`	string	Alternative URL for `video_online`.
`duration`	number	Duration in minutes.
`thumbnailUrl`	string	Thumbnail image URL.
`catalogCoverRectangularUrl`	string	Rectangular catalog cover URL.
`cycleIds`	number[]	Cycle IDs (positive integers). Replaces existing links.
`cycleStageIds`	number[]	Cycle stage IDs (positive integers).
`disciplineIds`	number[]	Discipline IDs (positive integers).
`schoolIds`	number[]	School IDs (positive integers).
`difficultyLevel`	string	`hard`, `medium`, or `low`.
`tags`	string	Comma-separated tags.
`source`	string	Content source.
`authors`	string	Content authors.
`disablePlayerControls`	boolean	Disable video player controls.
`showInStudentCatalog`	boolean	Show in student catalog.
`showInVisitorCatalog`	boolean	Show in visitor catalog.
`blockCatalogLoggedOut`	boolean	Block catalog access when logged out.
`showCourseDetails`	boolean	Show course details in catalog.
`showInRelatedVideos`	boolean	Show in related videos section.
`videoOrientation`	string	`horizontal` or `vertical`.
`status`	number	0: Draft. 1: Published.

When body, videoUrl, or fileUrl is sent, the value is validated according to the existing content type.

Response description

Key	Type	Description
`content`	object	Updated content object with full details.

Error responses

HTTP	Code	When
400	`invalid_argument`	Invalid fields (e.g. empty `title`, invalid `difficultyLevel`, invalid body for type)
401	`unauthenticated`	Missing or invalid JWT
403	`permission_denied`	User is not linked to the institution or is a student
404	`not_found`	Content not found or belongs to another institution

Security

Requires valid JWT with admin access (auth: true).
Data is scoped to the institution from the token.
Students cannot update library content.
HTTPS/TLS for all environments.