setSendConsentAttestation

Attest (attested: true) or withdraw (false) the organization's send consent: the org admin who owns this key states, once for the whole organization, that every contact it texts or emails through the developer API consented to be contacted. It opens the operations that message contacts (sendText, sendEmail, and accepting a card that sends, a contract's emails to its signers) to the organization's developer-API keys; it replaces no check: every send still runs opt-out, Do Not Contact and A2P registration, and Pause everything still holds them. Only on the admin's own word: never attest for them. ADMIN scope; the key owner must currently be an org admin. Returns attested, attestedAt, attestedByUserId.

curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "operationId": "setSendConsentAttestation",
    "variables": {
      "attested": true
    }
  }'

import { GoliathClient } from '@goliath-data/sdk'

const goliath = new GoliathClient({
  apiKey: process.env.GOLIATH_API_KEY!,
  baseUrl: 'https://server.goliathdata.com',
})

const result = await goliath.communications.setSendConsentAttestation(
  {
    attested: true
  },
  { idempotencyKey: crypto.randomUUID() },
)

const res = await fetch('https://server.goliathdata.com/api/v1/call', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.GOLIATH_API_KEY}`,
    'Content-Type': 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
  },
  body: JSON.stringify({
    operationId: 'setSendConsentAttestation',
    variables: {
      attested: true
    }
  }),
})
const { data, errors } = await res.json()

Variables

The example sends only what the schema requires. Some operations also need one of several optional variables (one filter or another, say); the description above says which.

attestedBoolean!required

Response

What comes back under data: a list shows as one entry, and a value as its type.

response shape

{
  "data": {
    "organizationMutation": {
      "setDeveloperApiSendConsent": {
        "attested": true,
        "attestedAt": "2026-01-01T00:00:00.000Z",
        "attestedByUserId": "<ID>"
      }
    }
  }
}

Errors

400unknown_variable

A variable the operation does not declare. A typo is refused rather than silently dropped.

401unauthorized

No bearer header, or the key is invalid or revoked.

403insufficient_scope

The key lacks the scope the operation requires.

403forbidden

A referenced record does not exist, was deleted, or is outside your organization. The gateway cannot tell those apart.

409idempotency_conflict

A request with this Idempotency-Key is still in flight.

Idempotency

Send an Idempotency-Key of 1 to 255 characters. A finished request retried with the same key replays its stored response, marked Idempotency-Replayed: true; one still in flight returns 409 idempotency_conflict. Keys expire after 24 hours. Write without fear →

curl https://server.goliathdata.com/api/v1/call \ -H "Authorization: Bearer $GOLIATH_API_KEY" \ -H "Content-Type: application/json" \ -H "Idempotency-Key: $(uuidgen)" \ -d '{ "operationId": "setSendConsentAttestation", "variables": { "attested": true } }'

import { GoliathClient } from '@goliath-data/sdk' const goliath = new GoliathClient({ apiKey: process.env.GOLIATH_API_KEY!, baseUrl: 'https://server.goliathdata.com', }) const result = await goliath.communications.setSendConsentAttestation( { attested: true }, { idempotencyKey: crypto.randomUUID() }, )

const res = await fetch('https://server.goliathdata.com/api/v1/call', { method: 'POST', headers: { Authorization: `Bearer ${process.env.GOLIATH_API_KEY}`, 'Content-Type': 'application/json', 'Idempotency-Key': crypto.randomUUID(), }, body: JSON.stringify({ operationId: 'setSendConsentAttestation', variables: { attested: true } }), }) const { data, errors } = await res.json()

Variables

Response

Errors

Idempotency

Related