---
title: "Accept the published terms for your own account"
method: POST
path: "/api/privacy/agreements"
tags: ["Privacy"]
---

# Accept the published terms for your own account

`POST /api/privacy/agreements`

## Request

- Base URL: `https://api.setluca.com`
- URL: `https://api.setluca.com/api/privacy/agreements`
- Auth: API key in cookie `luca.session_token`

**Session-only.** This endpoint isn't on the API-key allowlist. An organization API key gets a 403 here, whatever scopes it holds.

## Headers

- `Luca-API-Version` '1'

## Request body

- LegalAcceptanceRequest
  - `accepted` true, required
  - `statement` 'I agree to the Terms of Service and acknowledge the Privacy Policy. I am at least 18 and authorized to use Luca for my business. I will not use Luca to process minors' personal data or regulated medical records.', required
  - `termsVersion` string, required
  - `termsSha256` string, required
  - `privacyVersion` string, required
  - `privacySha256` string, required

## Response `200`

ok

- LegalAgreementStatus
  - `required` boolean, required
  - `acceptedAt` string, nullable, required
  - `documents` object, required
    - `status` 'draft' | 'published', required
    - `terms` object, required
      - `version` string, required
      - `sha256` string, required
      - `url` string, required
    - `privacy` object, required
      - `version` string, required
      - `sha256` string, required
      - `url` string, required
    - `publishedAt` string

## Other responses

- `400`: validation failed
- `401`: unauthorized
- `409`: conflict
- `429`: rate limited
- `503`: service unavailable

---

[API](https://skmtc.dev/setluca/apis/luca-api.md) · [All operations](https://skmtc.dev/setluca/apis/luca-api/llms.txt) · [OpenAPI document](https://skmtc.dev/setluca/apis/luca-api/revisions/90a200e4100b?raw)