# List a contact's consent history

`GET /v1/contacts/{id}/consent-history`

Requires an API key with the `contacts:read` scope. [About keys and scopes](/docs/api/authentication)

Every grant and withdrawal of consent, per channel or per topic, newest first: where it came from (dashboard, API, import, form, unsubscribe link), who made it, and the IP it came from. Append-only. Changes made before this history existed are not in it.

## Path parameters

- `id` (string, required, uuid)

## Query parameters

- `limit` (integer, optional, min > 0, max 100, default `20`)
- `cursor` (string, optional, 1–2048 characters)

## Returns

Returns `200 OK`. Otherwise returns an error; [Errors](/docs/api/errors) lists every code and which to retry.

- `id` (string, required, uuid)
- `channel` (string | null, required, one of `email`, `push`) — The channel consented to. With `topicId` null: consent to the channel; with both set: a per-channel topic choice.
- `topicId` (string | null, required, uuid) — The topic consented to, if any.
- `granted` (boolean, required) — True for a grant, false for a withdrawal.
- `source` (string, required, one of `dashboard`, `api`, `import`, `form`, `unsubscribe`, `system`, `sdk`)
- `sourceId` (string | null, required, uuid) — The form, when `source` is `form`.
- `actorType` (string, required, one of `user`, `api_key`, `contact`, `system`)
- `actorId` (string | null, required, uuid) — Member or API key id; null for the contact themselves and the system.
- `ip` (string | null, required) — IP address the change came from.
- `reason` (string | null, required) — Why it changed, when one was given.
- `basis` (string | null, required, one of `opted_in`, `existing_customer`) — How the person agreed, as the workspace stated it; null when nobody did.
- `evidence` (string | null, required) — Where and how they agreed, as stated.
- `occurredAt` (string, required, date-time)
- `actorName` (string | null, required) — The member's or API key's name now; null for the contact, the system, or one deleted.

## Example

```bash
curl https://api.kirora.io/v1/contacts/018f2a4e-6b1c-7d3e-9f40-37386ae05a6b/consent-history \
  -H "Authorization: Bearer $KIRORA_API_KEY"
```

Response `200`:

```json
{
  "data": [
    {
      "id": "018f2a4e-6b1c-7d3e-9f40-37386ae05a6b",
      "channel": "email",
      "topicId": "018f2a4e-6b1c-7d3e-9f40-84e01f695a6b",
      "granted": true,
      "source": "dashboard",
      "sourceId": "018f2a4e-6b1c-7d3e-9f40-dee8fa655a6b",
      "actorType": "user",
      "actorId": "018f2a4e-6b1c-7d3e-9f40-3c94fe175a6b",
      "ip": "ip_example",
      "reason": "reason_example",
      "basis": "opted_in",
      "evidence": "evidence_example",
      "occurredAt": "2030-03-14T09:30:00Z",
      "actorName": "actorName_example"
    }
  ],
  "meta": {
    "pagination": {
      "limit": 1,
      "nextCursor": "nextCursor_example"
    }
  }
}
```