# PATCH /api/v2/checkins/{checkin}

Check out, or correct a checkin

- MCP id: checkins.update
- Scope: api:write:checkins
- Permission: none, the record's own rules still apply
- Rate cost: 1 unit, write bucket. A write costs the same whatever `view` you ask for.
- Cache-Control: private, no-store

Partially updates a checkin: absent keys are untouched, an empty body is rejected.

Sending `checked_out_at` is the checkout: there is no `actions/check-out` route, because the write only ever fails on an invalid value. Send `checked_out_at: null` to re-open a closed checkin. `user_id` is not accepted, so a checkin cannot be moved to another employee. Send `If-Match` with the `ETag` from your last read to detect a concurrent edit, which answers `412`. Treat it as best-effort only: this resource carries no concurrency token, and `updated_at` is second-precision, so two writes inside the same second are indistinguishable. This operation declares no permission of its own, but it still requires `checkins::read`; a caller without it gets `404` on every checkin, their own included.

## Parameters
- checkin (integer, path): The Checkin's numeric id.
- view (string, optional): Which field set to render.
- X-Request-Id (header, optional): A correlation id of your own. It is recorded in our logs next to the server's request id but never returned: the response header always carries the server's id. A value that does not match the pattern is discarded silently, never rejected.
- If-Match (header, optional): The ETag a write is conditional on. A stale validator is 412 precondition-failed.

## Request body
- checked_in_at (timestamp (YYYY-MM-DDThh:mm:ssZ), optional): When the employee clocked in.
- checked_out_at (timestamp (YYYY-MM-DDThh:mm:ssZ) or null, optional): When the employee clocked out, or `null` while the checkin is still open. A `null` value marks the checkin plnnrly shows as active. Must be on or after checked_in_at.

Unknown keys are refused with `422` validation-failed, naming the key.

## Response 200
- id (integer, required): Unique identifier.
- user_id (integer, required, server-assigned): Employee this checkin belongs to. Assigned from the authenticated user on create and never writable.
- user (Ref or UserSummary, required): The employee this checkin belongs to. Expanding it with `?include=user` additionally requires the `users::read` permission and a token scope covering the users prefix.
- checked_in_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): When the employee clocked in.
- checked_out_at (timestamp (YYYY-MM-DDThh:mm:ssZ) or null, required): When the employee clocked out, or `null` while the checkin is still open. A `null` value marks the checkin plnnrly shows as active.
- created_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): Creation timestamp.
- updated_at (timestamp (YYYY-MM-DDThh:mm:ssZ), required): Last-write timestamp; use for incremental sync.
- links (CheckinLinks, required)
  - self (url, required): The canonical URI of this record.

## Errors
- 403 forbidden-by-policy | insufficient-permission | insufficient-token-scope: Forbidden.
- 412 precondition-failed: Precondition failed.
- 415 unsupported-media-type: Unsupported media type.
- 422 unprocessable-relationship | validation-failed: Unprocessable content.
- 400 idempotency-key-required | invalid-cursor | invalid-query-parameter | malformed-request | unsupported-parameter: Bad request.
- 401 token-expired | unauthenticated: Unauthenticated.
- 404 endpoint-not-found | resource-not-found: Not found.
- 406 not-acceptable: Not acceptable.
- 429 rate-limit-exceeded: Too many requests.
- 500 internal-error: Server error.
- 503 tenant-unavailable: Service unavailable.

## Example
```bash
curl -X PATCH \
  'https://<your-url>/api/v2/checkins/1' \
  -H 'Authorization: Bearer <token>' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -H 'If-Match: *' \
  -d '{
    "checked_out_at": "2026-08-31T16:48:00Z"
  }'
```