From 8119bbea1484d56e1ca48cb3ae830a382bbd4c3a Mon Sep 17 00:00:00 2001
From: "dev-portal-updater-protected[bot]"
 <242026823+dev-portal-updater-protected[bot]@users.noreply.github.com>
Date: Wed, 21 Oct 2026 14:23:43 +0000
Subject: [PATCH 1/2] feat: update `bitgo-api-docs` This commit updates the
 BitGo API.

---
 api.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/api.yaml b/api.yaml
index 2c55585..c43a5d0 100644
--- a/api.yaml
+++ b/api.yaml
@@ -80580,6 +80580,14 @@ components:
             type: array
             items:
               $ref: '#/components/schemas/AuditableItem'
+    EnterpriseSettings:
+      type: object
+      description: Settings controlled by enterprise admins
+      properties:
+        withdrawalAttestationRequired:
+          type: boolean
+          description: Whether withdrawals must be confirmed with the initiator's passkey
+          example: false
     EnterpriseSnowflakeReportType:
       title: EnterpriseSnowflakeReportType
       type: string
@@ -96211,6 +96219,8 @@ components:
           $ref: '#/components/schemas/ViewAllWallets'
         videoIdWaived:
           $ref: '#/components/schemas/VideoIdWaived'
+        settings:
+          $ref: '#/components/schemas/EnterpriseSettings'
       required:
         - id
     PlatformEnterpriseContract:
@@ -113383,6 +113393,17 @@ components:
           allOf:
             - $ref: '#/components/schemas/EnterpriseAvailableUI'
           description: The UI that this enterprise prefers to use
+        settings:
+          type: object
+          additionalProperties: false
+          minProperties: 1
+          description: Enterprise admin settings to change. Only the settings that are present are updated.
+          properties:
+            withdrawalAttestationRequired:
+              type: boolean
+              description: |
+                Require withdrawals to be confirmed with the initiator's passkey. Only an enterprise admin of an
+                enterprise with a single admin can change it; multi-admin enterprises are not supported yet.
     UpdateEnterpriseChallenge:
       title: UpdateEnterpriseChallenge
       type: object

From 827799ec9fe13b389cbbfb19923a6cdd125f52bc Mon Sep 17 00:00:00 2001
From: "dev-portal-updater-protected[bot]"
 <242026823+dev-portal-updater-protected[bot]@users.noreply.github.com>
Date: Wed, 21 Oct 2026 14:24:31 +0000
Subject: [PATCH 2/2] feat: update `bitgo-api-docs` This commit updates the
 BitGo API.

---
 api.yaml | 45 ++++++++++++++++++++++++++++++++++++++++++---
 1 file changed, 42 insertions(+), 3 deletions(-)

diff --git a/api.yaml b/api.yaml
index c43a5d0..f51dfb3 100644
--- a/api.yaml
+++ b/api.yaml
@@ -47220,6 +47220,12 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/PlatformError'
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformError'
   /api/v2/{coin}/wallet/{walletId}/address/{addressId}/deployment:
     post:
       summary: Deploy address
@@ -47414,6 +47420,12 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/PlatformError'
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformError'
     put:
       summary: Update address
       description: Update a receive address on a wallet
@@ -72107,6 +72119,10 @@ components:
           type: boolean
           description: Whether the customer has waived the need for Video ID on low risk withdrawals.
           example: false
+        settings:
+          allOf:
+            - $ref: '#/components/schemas/EnterpriseSettings'
+          description: Settings controlled by enterprise admins
         createdAt:
           type: string
           description: ISO 8601 creation timestamp derived from the MongoDB ObjectId
@@ -80581,12 +80597,18 @@ components:
             items:
               $ref: '#/components/schemas/AuditableItem'
     EnterpriseSettings:
+      title: EnterpriseSettings
       type: object
-      description: Settings controlled by enterprise admins
+      description: |-
+        Enterprise settings
+
+        Settings that an enterprise admin controls through `PUT /api/v2/enterprise/{enterpriseId}`.
       properties:
         withdrawalAttestationRequired:
           type: boolean
-          description: Whether withdrawals must be confirmed with the initiator's passkey
+          description: |-
+            Require withdrawals to be confirmed with the initiator's passkey. Has no effect until
+            withdrawal-intent attestation enforcement is enabled for the enterprise.
           example: false
     EnterpriseSnowflakeReportType:
       title: EnterpriseSnowflakeReportType
@@ -82099,6 +82121,15 @@ components:
           type: string
         evmKeyRingReferenceWalletId:
           type: string
+        trustedTokens:
+          type: array
+          items:
+            allOf:
+              - type: object
+                properties:
+                  state:
+                    $ref: '#/components/schemas/TrustedTokenState'
+              - $ref: '#/components/schemas/Token'
       required:
         - pendingChainInitialization
         - creationFailure
@@ -96220,7 +96251,7 @@ components:
         videoIdWaived:
           $ref: '#/components/schemas/VideoIdWaived'
         settings:
-          $ref: '#/components/schemas/EnterpriseSettings'
+          $ref: '#/components/schemas/PlatformEnterpriseSettings'
       required:
         - id
     PlatformEnterpriseContract:
@@ -96232,6 +96263,14 @@ components:
         endDate:
           type: string
           description: The contract end date for an enterprise
+    PlatformEnterpriseSettings:
+      type: object
+      description: Settings controlled by enterprise admins
+      properties:
+        withdrawalAttestationRequired:
+          type: boolean
+          description: Whether withdrawals must be confirmed with the initiator's passkey
+          example: false
     PlatformFreeze:
       type: object
       properties: