---
title: "Enroll Monitoring"
method: POST
path: "/monitoring/{identifier}"
tags: ["Monitoring"]
---

# Enroll Monitoring

`POST /monitoring/{identifier}`

## Request

- Base URL: `https://api.burodeingresos.com`
- URL: `https://api.burodeingresos.com/monitoring/{identifier}`
- Auth: API key in header `X-API-Key`
- TypeScript: <https://skmtc.dev/burodeingresos/apis/bur-de-ingresos-api/docs/monitoring/:identifier/post.ts> (a function with typed inputs; its response is checked against the schema)

Enrolls an identifier in monitoring for your company. Requires a valid consent for the identifier, unless you send `ip_address`: then a consent is recorded with that IP and your company's privacy notice, and the monitoring does not expire (`expires_at` is null). Otherwise `expires_at` is the consent's expiry.

If your company has no verification of the identifier in the last 30 days, the first verification runs right away; otherwise it runs 30 days after the last one. After that, the identifier is verified again about once a month while the monitoring is `active`.

Idempotent: enrolling an identifier that is already active keeps its enrollment date and only extends its expiry with a newer consent. A `cancelled` or `expired` monitoring becomes `active` again.

## Path parameters

- `identifier` string, required

## Request body

- EnrollMonitoringRequest
  - `ip_address` string: Optional. IPv4 or IPv6 address from which the individual gave consent. When sent, a consent is recorded with your company's privacy notice and the monitoring does not expire.

## Response `200`

The monitoring, as it stands after the enrollment.

- Monitoring
  - `id` string, uuid: Unique identifier of the monitoring.
  - `identifier` string: The monitored identifier.
  - `status` 'active' | 'cancelled' | 'expired': `active`: verified about once a month. `cancelled`: cancelled by your company. `expired`: its consent ran out.
  - `enrolled_at` string, date-time: When the identifier was enrolled.
  - `expires_at` string, date-time, nullable: When the monitoring expires: its consent's expiry. Always present; null when the monitoring was enrolled with `ip_address` and does not expire.
  - `cancelled_at` string, date-time: When the monitoring was cancelled. Present only when it was cancelled.

## Other responses

- `400`: Bad Request - Invalid identifier or `ip_address`, or no valid consent for the identifier.
- `401`: Unauthorized - Invalid or missing API key.
- `403`: Forbidden - Only an active account can enroll identifiers in monitoring. Reading and cancelling stay available.

## Changes

- **2026-11-03** `98eb3984cffb`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/burodeingresos/apis/bur-de-ingresos-api/changes/monitoring/:identifier/post.md)

---

[API](https://skmtc.dev/burodeingresos/apis/bur-de-ingresos-api.md) - [All operations](https://skmtc.dev/burodeingresos/apis/bur-de-ingresos-api/llms.txt) - [OpenAPI document](https://skmtc.dev/burodeingresos/apis/bur-de-ingresos-api/revisions/98eb3984cffb?raw)