Skip to main content
POST
Record a consent decision (append-only)

Body

application/json
subject_id
string
required

Pseudonymous client/session id (the same opaque id the consent-store keeps locally). NOT raw PII.

Maximum string length: 128
action
enum<string>
required
Available options:
accept_all,
reject_all,
save_preferences,
withdraw
categories
object

Consented toggles. essential is always-on and recorded as true regardless.

Maximum string length: 512
schema_version

Consent schema version. Accepts a number (the client currently sends record.version as a number) or a string; the handler normalizes numbers to their string form before persisting (MNE-6453).

Maximum string length: 64
gpc
boolean

Client-observed GPC/DNT signal (OR'd with the request's Sec-GPC / DNT headers).

decided_at
string<date-time>

ISO-8601 timestamp of the client decision.

Response

Consent decision recorded.

recorded
boolean
required
id
string<uuid> | null
created_at
string<date-time> | null