---
title: "Capture signup attribution once, on the first onboarding render"
method: POST
path: "/api/onboarding/attribution"
tags: ["Onboarding"]
---

# Capture signup attribution once, on the first onboarding render

`POST /api/onboarding/attribution`

## Request

- Base URL: `https://api.setluca.com`
- URL: `https://api.setluca.com/api/onboarding/attribution`
- Auth: API key in cookie `luca.session_token`

**Session-only.** This endpoint isn't on the API-key allowlist. An organization API key gets a 403 here, whatever scopes it holds.

## Headers

- `Luca-API-Version` '1'

## Request body

- OnboardingAttribution
  - `utmSource` string, nullable
  - `utmMedium` string, nullable
  - `utmCampaign` string, nullable
  - `utmContent` string, nullable
  - `utmTerm` string, nullable
  - `fbclid` string, nullable
  - `gclid` string, nullable
  - `fbc` string, nullable
  - `fbp` string, nullable
  - `landingPage` string, nullable
  - `referrer` string, nullable

## Response `200`

ok

- OnboardingAttributionResponse
  - `ok` true, required
  - `captured` boolean, required

## Other responses

- `400`: bad request
- `401`: unauthorized
- `429`: rate limited
- `500`: internal error
- `503`: service unavailable

---

[API](https://skmtc.dev/setluca/apis/luca-api.md) · [All operations](https://skmtc.dev/setluca/apis/luca-api/llms.txt) · [OpenAPI document](https://skmtc.dev/setluca/apis/luca-api/revisions/90a200e4100b?raw)