> ## Documentation Index > Fetch the complete documentation index at: https://swapnice.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Create a consent receipt > Record purpose grants after the user accepts. Record purpose grants after the user accepts. Events for a purpose are rejected until this exists. Include `terms_version` and `privacy_policy_version`. ## OpenAPI ````yaml openapi.yaml POST /v1/consent-receipts openapi: 3.0.3 info: title: Swapnice Partner API version: 0.1.0 description: > Swapnice's partner API lets trusted partner applications connect customer accounts, collect explicit consent, ingest governed events and claims, and synchronously read consent-filtered profile intelligence with provenance. The API is designed for a Cloudflare Workers gateway backed by Durable Objects for short-lived sessions, per-customer ordering, consent coordination, and idempotency, plus D1 for longer-lived partner app configuration, consent archives, token metadata, customer records, and audit history. Public schemas use descriptive field names. Compact Firebase-era storage keys such as `c0`, `p0`, or `upiv` are internal implementation details and must not be exposed. contact: name: Swapnice API Support email: api@swapnice.com license: name: Proprietary url: https://swapnice.com/legal/api-terms servers: - url: https://api.swapnice.com description: Production API - url: https://api.sandbox.swapnice.com description: Sandbox API security: - OAuth2: [] tags: - name: OAuth description: OAuth 2.1 authorization, token, introspection, revocation, and discovery. - name: Apps description: Partner OAuth application configuration and webhook endpoints. - name: Connection Sessions description: Short-lived account-linking sessions coordinated by Durable Objects. - name: Consent description: Consent grants, receipts, effective consent state, and revocation. - name: Customers description: Partner-scoped customer records and metadata. - name: Ontologies description: Ontology contracts and filter-field metadata for entries and events. - name: Entries description: Ontology-backed collectible entries using readable external fields. - name: Events description: Non-blocking ordered event and claim ingestion. - name: Profiles description: Consent-aware synchronous reads for claims, intents, and profile facts. - name: Webhooks description: Partner webhook endpoint registration and delivery status. paths: /v1/consent-receipts: post: tags: - Consent summary: Create a consent receipt description: > Persists consent through the per-customer `CustomerConsentObject` before returning. Historical receipt archives are kept in D1 for audit and data subject requests. operationId: createConsentReceipt parameters: - $ref: '#/components/parameters/IdempotencyKey' requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/ConsentReceiptCreateRequest' responses: '201': description: Consent receipt created. content: application/json: schema: $ref: '#/components/schemas/ConsentReceipt' '409': $ref: '#/components/responses/Conflict' security: - OAuth2: - consent:write components: parameters: IdempotencyKey: name: Idempotency-Key in: header required: true description: > Required for mutating requests. Replays with the same key and payload hash return the original logical result; replays with a different payload hash return `409`. schema: type: string minLength: 16 maxLength: 255 example: idem_01HZZZ8KQ2J9X2RW7B8Y4D2FPK schemas: ConsentReceiptCreateRequest: type: object required: - customer_id - purposes - terms_version - privacy_policy_version properties: customer_id: type: string purposes: type: array minItems: 1 items: $ref: '#/components/schemas/ConsentPurpose' connection_session_id: type: string terms_version: type: string privacy_policy_version: type: string evidence: $ref: '#/components/schemas/ConsentEvidence' ConsentReceipt: type: object required: - id - app_id - customer_id - purposes - terms_version - privacy_policy_version - status - granted_at properties: id: type: string app_id: type: string customer_id: type: string purposes: type: array items: $ref: '#/components/schemas/ConsentPurposeGrant' terms_version: type: string privacy_policy_version: type: string status: type: string enum: - active - partially_revoked - revoked granted_at: type: string format: date-time revoked_at: type: string nullable: true format: date-time ConsentPurpose: type: string enum: - account_linking - personalization - analytics - support - event_enrichment - profile_resolution - measurement ConsentEvidence: type: object properties: ip_address: type: string user_agent: type: string locale: type: string collected_at: type: string format: date-time ConsentPurposeGrant: type: object required: - purpose - status properties: purpose: $ref: '#/components/schemas/ConsentPurpose' status: type: string enum: - granted - revoked granted_at: type: string format: date-time revoked_at: type: string nullable: true format: date-time ErrorResponse: type: object required: - error properties: error: type: object required: - code - message - request_id properties: code: type: string example: consent_denied message: type: string request_id: type: string details: type: array items: $ref: '#/components/schemas/ErrorDetail' ErrorDetail: type: object required: - code - message properties: code: type: string message: type: string field: type: string responses: Conflict: description: Idempotency conflict or invalid state transition. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' securitySchemes: OAuth2: type: oauth2 description: >- OAuth 2.1 authorization code with PKCE. Implicit and password flows are unsupported. flows: authorizationCode: authorizationUrl: https://api.swapnice.com/oauth/authorize tokenUrl: https://api.swapnice.com/oauth/token refreshUrl: https://api.swapnice.com/oauth/token scopes: offline_access: Issue rotating refresh tokens when allowed. apps:read: Read partner app configuration. apps:write: Manage partner app configuration. connections:read: Read connection sessions. connections:write: Create or cancel connection sessions. consent:read: Read consent receipts and effective consent. consent:write: Create and revoke consent. customers:read: Read partner customers. customers:write: Create or update partner customers. ontologies:read: Read ontologies and field maps. ontologies:write: Rebuild ontology filter metadata. entries:read: Read ontology-backed entries. entries:write: Create or update ontology-backed entries. events:read: Read event status. events:write: Ingest events and claims. profile:read: Read resolved profile facts. profiles:read: Read profile resources. claims:read: Read claims. intents:read: Read intents. webhooks:read: Read webhook endpoints. webhooks:write: Manage webhook endpoints. workflows:read: Read async workflow status. tokens:introspect: Introspect tokens. tokens:revoke: Revoke tokens. ````