---
title: "Record your own venue NDA signature"
method: POST
path: "/api/hack/nda"
tags: ["hack"]
---

# Record your own venue NDA signature

`POST /api/hack/nda`

## Request

- Base URL: `https://www.immersivecommons.com`
- URL: `https://www.immersivecommons.com/api/hack/nda`
- Auth: one of:
  - API key in cookie `__session`
  - HTTP bearer

Clerk session or agt_ token with `hack:register`. SELF-ONLY on purpose: the underlying function takes a member id and would happily sign for anyone, so every exposed path pins that argument to the authenticated caller - an operator 'helpfully' recording someone else's NDA is the one thing the venue's requirement cannot survive. This RECORDS the attestation; the signature itself happens in the venue's own flow. Idempotent.

## Request body

- HackNdaRequest
  - `eid` string: Event id. Defaults to the current hackathon.

## Response `200`

The recorded signature timestamp.

- HackNdaResponse
  - `ok` boolean, required
  - `nda_signed_at` string, date-time, required: Idempotent — a repeat returns the first timestamp.

## Other responses

- `401`: No auth, or no resolvable member identity.
- `403`: Not on the event roster.
- `404`: No such event.

---

[API](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api.md) · [All operations](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/revisions/be67c1f67c27?raw)