List a contact's consent history

{
  "data": [
    {
      "id": "b2e7d9a4-61c3-4f0e-8a5d-2c9f7e1b3a60",
      "tenant_id": "7a1d4e2b-9c8f-4b3a-a6e5-0d2c1f9b8e74",
      "contact_id": "3f6c1a2e-8d4b-4c7a-9e21-5b7d0c9a4e18",
      "consent_type": "voice_call",
      "status": "granted",
      "source": "web_form",
      "ip_address": "181.52.33.10",
      "evidence": "formulario-landing/submission/48213",
      "granted_at": "2026-09-12T14:22:08.000Z",
      "revoked_at": null,
      "expires_at": "2027-09-12T00:00:00.000Z",
      "created_at": "2026-09-12T14:22:08.000Z"
    },
    {
      "id": "5c0a8f3e-2d7b-4e91-b4c6-9a1e0f7d2b85",
      "tenant_id": "7a1d4e2b-9c8f-4b3a-a6e5-0d2c1f9b8e74",
      "contact_id": "3f6c1a2e-8d4b-4c7a-9e21-5b7d0c9a4e18",
      "consent_type": "voice_call",
      "status": "revoked",
      "source": "import",
      "ip_address": null,
      "evidence": "crm-export-2026-06",
      "granted_at": "2026-06-03T09:10:00.000Z",
      "revoked_at": "2026-09-12T14:22:08.000Z",
      "expires_at": null,
      "created_at": "2026-06-03T09:10:00.000Z"
    }
  ]
}

Returns every consent record for the contact, newest first (created_at descending). This includes revoked and erased records and the unknown records written by contact imports that carried no evidence. A contact with no records, or an id that matches no contact, returns an empty list rather than a 404. The list is not paginated.

Use it to answer a data-subject access request or an auditor’s question: “on what basis was this person called?”

Consistency. Results are cached for up to 120 seconds. Granting, revoking and erasing evict the cache.

Access

Required scope: read or write. Signed-in users with any of the owner, admin, member or viewer roles.
Rate limit: General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. See Rate limits.
Plan: Available on every plan.

Returns every consent record for the contact, newest first (`created_at` descending). This includes `revoked` and `erased` records and the `unknown` records written by contact imports that carried no evidence. A contact with no records, or an id that matches no contact, returns an empty list rather than a 404. The list is not paginated. Use it to answer a data-subject access request or an auditor's question: "on what basis was this person called?" **Consistency.** Results are cached for up to 120 seconds. Granting, revoking and erasing evict the cache. **Access** - **Required scope:** `read` or `write`. Signed-in users with any of the `owner`, `admin`, `member` or `viewer` roles. - **Rate limit:** General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. See [Rate limits](/rate-limits). - **Plan:** Available on every plan.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Path parameters

contactIdstringRequiredformat: "uuid"

The contact's id. A value that is not a UUID returns 400.

Response

Consent history, newest first.

datalist of objects

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

429

Too Many Requests Error