Consent

Grant, list, inspect, and revoke purpose-limited consent receipts.

Events and purpose-scoped profile reads fail closed without a grant. Revoke is accepted immediately (202); archive work is asynchronous.

Endpoints in this group

Method	Path	Scope
POST	/v1/consent-receipts	consent:write
GET	/v1/consent-receipts	consent:read
POST	/v1/consent-receipts/{receipt_id}/revoke	consent:write
GET	/v1/customers/{customer_id}/effective-consent	consent:read

Include terms_version and privacy_policy_version on create. consent_purpose on later events must be one of the granted purposes.

Purposes in product language: consent and account linking.