Create a consent record

Módulo Settings

POST/consent-recordsconsentRecords.create

A consent given or withdrawn. Creates a consent record. Requires `Idempotency-Key`; a replay returns the original response. The organization is derived from the credential or the parent row, never from the body.

Requiere la capacidad me.account.write.
Alcances de OAuth: me.
Envía el encabezado Idempotency-Key. Una repetición con la misma clave devuelve la respuesta original.
Estados de error: 400, 401, 409, 422, 429. Los errores son detalles de problema RFC 9457.

Cuerpo de la solicitud: ConsentRecordCreate

consentRecords.create: ConsentRecordCreate
Campo	Tipo	Obligatorio	Descripción
person_id	string (uuid)	Sí	Identifier of the person.
purpose_code	string	Sí	Consent purpose.Restricciones: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$
notice_version	string	Sí	Version of the notice shown when consent was given.Restricciones: length 1 to 300
source	"Web" \| "Mobile" \| "Email" \| "SMS" \| "Import" \| "Support"	Sí	Where consent was captured.

{
  "person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "purpose_code": "marketing_email",
  "notice_version": "2026-10-01",
  "source": "Web"
}

Respuesta 201: ConsentRecord

consentRecords.create: ConsentRecord
Campo	Tipo	Obligatorio	Descripción
id	string (uuid)	Sí	Identifier of the consent record.
created_at	string (date-time)	Sí	When the row was created.
updated_at	string (date-time)	Sí	When the row was last updated.
person_id	string (uuid)	Sí	Identifier of the person.
purpose_code	string	Sí	Consent purpose.Restricciones: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$
notice_version	string	Sí	Version of the notice shown when consent was given.Restricciones: length 1 to 300
source	"Web" \| "Mobile" \| "Email" \| "SMS" \| "Import" \| "Support"	Sí	Where consent was captured.
captured_at	string (date-time)	Sí	When consent was given, set by the database.
captured_ip	string \| null	Sí	Client IP address at capture, set by the database.Restricciones: length 1 to 300
withdrawn_at	string (date-time) \| null	Sí	When the person withdrew consent; null while it stands.

{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "updated_at": "2026-10-08T14:30:00Z",
  "person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "purpose_code": "marketing_email",
  "notice_version": "2026-10-01",
  "source": "Web",
  "captured_at": "2026-10-08T14:30:00Z",
  "captured_ip": "203.0.113.24",
  "withdrawn_at": "2026-10-08T14:30:00Z"
}

Ejemplos de código

curl -X POST "$XOS_BASE_URL/consent-records" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"person_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","purpose_code":"marketing_email","notice_version":"2026-10-01","source":"Web"}'

const { data } = await xos.consentRecords.create({
    "person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
    "purpose_code": "marketing_email",
    "notice_version": "2026-10-01",
    "source": "Web"
  });

response = xos.consent_records.create({"person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f", "purpose_code": "marketing_email", "notice_version": "2026-10-01", "source": "Web"})

xos consent-records create --data '{"person_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","purpose_code":"marketing_email","notice_version":"2026-10-01","source":"Web"}'