Endpoint
Authentication
Requires a developer API key in theAuthorization header.
Request Headers
| Header | Value |
|---|---|
Authorization | Bearer <api_key> |
Path Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
recordId | string | Yes | The consent record ID |
Example Request
Response — 200 OK
Response Fields
| Field | Type | Description |
|---|---|---|
recordId | string | Unique consent record ID |
grantId | string | The associated grant ID |
dataPrincipalId | string | The data principal who gave consent |
dataFiduciaryName | string | Name of the data fiduciary (developer) |
purposes | object[] | Array of purpose objects ({ code, description }) |
scopes | string[] | Scopes from the associated grant |
consentNoticeId | string | ID of the consent notice |
status | string | Record status: active, withdrawn, expired, or erased |
consentGivenAt | string | ISO-8601 timestamp of original consent |
processingExpiresAt | string | ISO-8601 processing expiry timestamp |
retentionUntil | string | ISO-8601 data retention limit |
accessCount | number | Number of times this record has been accessed |
lastAccessedAt | string | null | ISO-8601 timestamp of last access |
withdrawnAt | string | null | ISO-8601 timestamp of withdrawal (if withdrawn) |
withdrawnReason | string | null | Reason for withdrawal (if withdrawn) |
createdAt | string | ISO-8601 creation timestamp |
Error Responses
| Status | Code | Description |
|---|---|---|
| 401 | UNAUTHORIZED | Invalid or missing API key |
| 404 | NOT_FOUND | Consent record not found |