Webhook event: consent.granted

When it fires

consent.granted is emitted when a consent flag is set. It fires once per occurrence; a redelivery of the same occurrence carries the same event id.

If your endpoint does not return a 2xx within the timeout, delivery is retried on an exponential backoff schedule — see Webhook delivery and retries. Design your handler to be idempotent so a redelivered event is safe to process twice.

Example delivery

{
  "id": "evt_CONS7X",
  "type": "consent.granted",
  "created": "2026-07-04T10:00:00Z",
  "livemode": true,
  "api_version": "2026-07-01",
  "data": {
    "object": {
      "id": "con_1A5C9",
      "subject": "enq_9F3K2P",
      "purpose": "marketing",
      "granted": true
    }
  }
}

Handling it

A common handler will unlock the permitted communication channel. Verify the signature first, acknowledge with 200 within 10 seconds, then do the work asynchronously. The underlying resource is the same shape the post consent endpoint returns, so you can re-fetch current state if you need it.