# setSendConsentAttestation

Attest (`attested: true`) or withdraw (`false`) the organization's send consent: the org admin who owns this key states, once for the whole organization, that every contact it texts or emails through the developer API consented to be contacted. It opens the operations that message contacts (sendText, sendEmail, and accepting a card that sends, a contract's emails to its signers) to the organization's developer-API keys; it replaces no check: every send still runs opt-out, Do Not Contact and A2P registration, and Pause everything still holds them. Only on the admin's own word: never attest for them. ADMIN scope; the key owner must currently be an org admin. Returns attested, attestedAt, attestedByUserId.

- Call: `POST https://server.goliathdata.com/api/v1/call` with `{ "operationId": "setSendConsentAttestation", "variables": {...} }`
- Scope: `ADMIN`
- Type: mutation
- Idempotency: honors `Idempotency-Key` (24 h)
- Rate-limited: no

## Variables

- `attested`: `Boolean!` (required)

## Response (data, an example)

```json
{
  "organizationMutation": {
    "setDeveloperApiSendConsent": {
      "attested": true,
      "attestedAt": "2026-01-01T00:00:00.000Z",
      "attestedByUserId": "<ID>"
    }
  }
}
```

## Example

```bash
curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "operationId": "setSendConsentAttestation",
    "variables": {
      "attested": true
    }
  }'
```