---
title: "Read consent (consumer)"
method: POST
path: "/user/payment-account/consent/get"
tags: ["Consent"]
---

# Read consent (consumer)

`POST /user/payment-account/consent/get`

## Request

- Base URL: `https://www.sandbox.striga.com/api/v1`
- URL: `https://www.sandbox.striga.com/api/v1/user/payment-account/consent/get`
- Auth: API key in header `api-key` and API key in header `Authorization`

Returns the stored Payment Account consent record for a user. `paymentAccountConsent` is `null` when consent has never been recorded.

Note this read endpoint is a `POST`, like the rest of the Striga API.

## Request body

- object
  - `userId` string, uuid, required: The user to read consent for.

## Response `200`

The stored consent record, or `null` when never recorded.

- UserConsentNullableResponse
  - `userId` string, uuid, required
  - `paymentAccountConsent` ConsentRecord, required: The stored consent record. Optional fields are present only when they were supplied (or defaulted) on the recording call.
    - `accepted` boolean, required
    - `dateAccepted` string, date-time, required
    - `ip` string
    - `termsUri` string, uri
    - `termsVersion` string

## Other responses

- `400`: Validation failure (`errorCode` `00002`), or the user does not exist (`errorCode` `30005`).
- `401`: Missing or invalid `api-key` or HMAC signature.
- `403`: `errorCode` `30042`: your application does not have the `GET_PAYMENT_ACCOUNT_CONSENT` permission. `errorCode` `30043` / `32017`: the user's account status blocks the call (inaccessible / terminated). Suspended users can be read.
- `404`: `errorCode` `30005`: the user was not found in this application.

---

[API](https://skmtc.dev/striga/apis/payment-accounts-third-party-payments.md) - [All operations](https://skmtc.dev/striga/apis/payment-accounts-third-party-payments/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/payment-accounts-third-party-payments/revisions/61bef9935c6d?raw)