diff --git a/api.yaml b/api.yaml
index 2c55585..f51dfb3 100644
--- a/api.yaml
+++ b/api.yaml
@@ -47220,6 +47220,12 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/PlatformError'
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformError'
   /api/v2/{coin}/wallet/{walletId}/address/{addressId}/deployment:
     post:
       summary: Deploy address
@@ -47414,6 +47420,12 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/PlatformError'
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformError'
     put:
       summary: Update address
       description: Update a receive address on a wallet
@@ -72107,6 +72119,10 @@ components:
           type: boolean
           description: Whether the customer has waived the need for Video ID on low risk withdrawals.
           example: false
+        settings:
+          allOf:
+            - $ref: '#/components/schemas/EnterpriseSettings'
+          description: Settings controlled by enterprise admins
         createdAt:
           type: string
           description: ISO 8601 creation timestamp derived from the MongoDB ObjectId
@@ -80580,6 +80596,20 @@ components:
             type: array
             items:
               $ref: '#/components/schemas/AuditableItem'
+    EnterpriseSettings:
+      title: EnterpriseSettings
+      type: object
+      description: |-
+        Enterprise settings
+
+        Settings that an enterprise admin controls through `PUT /api/v2/enterprise/{enterpriseId}`.
+      properties:
+        withdrawalAttestationRequired:
+          type: boolean
+          description: |-
+            Require withdrawals to be confirmed with the initiator's passkey. Has no effect until
+            withdrawal-intent attestation enforcement is enabled for the enterprise.
+          example: false
     EnterpriseSnowflakeReportType:
       title: EnterpriseSnowflakeReportType
       type: string
@@ -82091,6 +82121,15 @@ components:
           type: string
         evmKeyRingReferenceWalletId:
           type: string
+        trustedTokens:
+          type: array
+          items:
+            allOf:
+              - type: object
+                properties:
+                  state:
+                    $ref: '#/components/schemas/TrustedTokenState'
+              - $ref: '#/components/schemas/Token'
       required:
         - pendingChainInitialization
         - creationFailure
@@ -96211,6 +96250,8 @@ components:
           $ref: '#/components/schemas/ViewAllWallets'
         videoIdWaived:
           $ref: '#/components/schemas/VideoIdWaived'
+        settings:
+          $ref: '#/components/schemas/PlatformEnterpriseSettings'
       required:
         - id
     PlatformEnterpriseContract:
@@ -96222,6 +96263,14 @@ components:
         endDate:
           type: string
           description: The contract end date for an enterprise
+    PlatformEnterpriseSettings:
+      type: object
+      description: Settings controlled by enterprise admins
+      properties:
+        withdrawalAttestationRequired:
+          type: boolean
+          description: Whether withdrawals must be confirmed with the initiator's passkey
+          example: false
     PlatformFreeze:
       type: object
       properties:
@@ -113383,6 +113432,17 @@ components:
           allOf:
             - $ref: '#/components/schemas/EnterpriseAvailableUI'
           description: The UI that this enterprise prefers to use
+        settings:
+          type: object
+          additionalProperties: false
+          minProperties: 1
+          description: Enterprise admin settings to change. Only the settings that are present are updated.
+          properties:
+            withdrawalAttestationRequired:
+              type: boolean
+              description: |
+                Require withdrawals to be confirmed with the initiator's passkey. Only an enterprise admin of an
+                enterprise with a single admin can change it; multi-admin enterprises are not supported yet.
     UpdateEnterpriseChallenge:
       title: UpdateEnterpriseChallenge
       type: object