Skip to main content
POST
Create a consent receipt
Record purpose grants after the user accepts. Events for a purpose are rejected until this exists. Include terms_version and privacy_policy_version.

Authorizations

Authorization
string
header
required

OAuth 2.1 authorization code with PKCE. Implicit and password flows are unsupported.

Headers

Idempotency-Key
string
required

Required for mutating requests. Replays with the same key and payload hash return the original logical result; replays with a different payload hash return 409.

Required string length: 16 - 255

Body

application/json
customer_id
string
required
purposes
enum<string>[]
required
Minimum array length: 1
Available options:
account_linking,
personalization,
analytics,
support,
event_enrichment,
profile_resolution,
measurement
terms_version
string
required
privacy_policy_version
string
required
connection_session_id
string
evidence
object

Response

Consent receipt created.

id
string
required
app_id
string
required
customer_id
string
required
purposes
object[]
required
terms_version
string
required
privacy_policy_version
string
required
status
enum<string>
required
Available options:
active,
partially_revoked,
revoked
granted_at
string<date-time>
required
revoked_at
string<date-time> | null