---
title: "Accept a privacy-safe first-party product event"
method: POST
path: "/api/events"
---

# Accept a privacy-safe first-party product event

`POST /api/events`

## Request

- Base URL: `https://api.x402card.org`
- URL: `https://api.x402card.org/api/events`
- Auth: none declared

Event names and properties are allowlisted. Wallet addresses, IP addresses, user agents, tokens, signatures, PAN and CVV are never accepted as raw event fields.

## Request body

- object
  - `eventId` string, uuid, required
  - `eventName` string, required
  - `visitorId` string, uuid, required
  - `path` string
  - `properties` object

## Response `202`

Event accepted

## Other responses

- `400`: Event rejected by schema

---

[API](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api.md) · [All operations](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api/llms.txt) · [OpenAPI document](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api/revisions/90ffb84a664e?raw)
