Grant explicit revocable field, purpose, account and time-bounded third-party direction after fresh authentication and ownership proof

POST/users/me/data-consents

Own active customer session, bank-verified customer binding, customer scope and authentication within five minutes required. Exact current disclosure hash, explicit confirmation, selected fields/purpose/accounts and expiry are retained immutably. Identity proves ownership of every consumer account using a 30-second signer-bound svc_identity token with only accounts:consent:verify. Business permissions or arbitrary account lists are insufficient. A replay may return revoked evidence but never restores authority.

Headers

Idempotency-KeystringRequired

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

account_idsarray of stringsRequired

confirmedbooleanRequired

disclosure_sha256stringRequired

expires_atstring · date-timeRequired

fieldsarray of stringsRequired

provider_idstringRequired

provider_versionintegerRequired

purposestringRequired

Returns

200 OK

created_atstring · date-timeRequired

customer_idstringRequired

Example cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm

grantobjectRequired

8 child attributes

disclosurestringRequired

disclosure_sha256stringRequired

fieldsarray of stringsRequired

history_daysintegerRequired

max_consent_daysintegerRequired

privacy_policy_idstringRequired

privacy_rule_idstringRequired

purposestringRequired

idstringRequired

provider_namestringRequired

provider_subjectstringRequired

requestobjectRequired

8 child attributes

account_idsarray of stringsRequired

confirmedbooleanRequired

disclosure_sha256stringRequired

expires_atstring · date-timeRequired

fieldsarray of stringsRequired

provider_idstringRequired

provider_versionintegerRequired

purposestringRequired

revoked_atstring · date-time or nullOptional

session_idstringRequired

Example sess_2tVh8nqLxq4GbDe0K1F6S9zRcWm

user_idstringRequired

Example user_2tVh8nqLxq4GbDe0K1F6S9zRcWm

versionintegerRequired

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503