---
title: "Acknowledge the primary-domain risk disclosure."
method: POST
path: "/byo-domains/{id}/consent"
tags: ["byo-domains"]
---

# Acknowledge the primary-domain risk disclosure.

`POST /byo-domains/{id}/consent`

## Request

- Base URL: `https://api.coldrig.dev`
- URL: `https://api.coldrig.dev/byo-domains/{id}/consent`
- Auth: HTTP bearer

Required before a primary-domain intake can proceed past pending_consent. acknowledged must be the literal true — there is no default or implied acknowledgment. Idempotent past pending_consent. The acknowledgment documents informed consent; it does not itself remove the business's exposure or substitute for the technical safeguards in §20.1/§20.2.

## Path parameters

- `id` string, required

## Request body

- AcknowledgeByoConsentInput
  - `acknowledged` true, required: Must be the literal true — a separate, unbundled risk acknowledgment.

## Response `200`

Consent recorded.

- ByoDomainRecord
  - `domainId` string, required
  - `domain` string, required
  - `isPrimary` boolean, required
  - `dnsMode` 'we_manage_zone' | 'records_to_apply', required
  - `byoStatus` 'pending_kyc' | 'pending_consent' | 'pending_dns' | 'active' | 'rejected' | 'abandoned', required
  - `breakerTier` 'standard' | 'elevated' | 'primary', required
  - `reputationBranch` string, nullable, required
  - `scan` object, required: Pre-flight live-infra scan result.
  - `abuseVerdict` string, required: Abuse-gate verdict.
  - `consentAcknowledged` boolean, required

## Other responses

- `400`: Request body failed schema validation.
- `401`: Missing, invalid, or inactive bearer token.
- `404`: Resource not found, or not owned by the authenticated account.

---

[API](https://skmtc.dev/coldrig/apis/agent-cold-email-api.md) · [All operations](https://skmtc.dev/coldrig/apis/agent-cold-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/coldrig/apis/agent-cold-email-api/revisions/242a462d82c4?raw)