{
  "consent_id": "c1a2b3d4-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
  "subject_id": "7e8f9a0b-1c2d-4e3f-8a9b-0c1d2e3f4a5b",
  "country": "CL",
  "doc_id": "12.345.678-5",
  "subject_type": "person",
  "purpose": "credit_evaluation",
  "status": "revoked",
  "previous_status": "pending",
  "revoked_at": "2026-08-10T10:02:11Z"
}

Qscore consent revoked

A consent link was revoked, either by the holder declining the request on the public page or by your account calling POST /v1/qscore/consents/{id}/revoke. A revoked consent no longer feeds positive banking data into new Qscore reports.

Every delivery includes X-Webhook-Event, X-Webhook-Event-ID, X-Webhook-Delivery-ID, X-Webhook-Timestamp and X-Webhook-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Respond 2xx; up to 5 attempts with incremental backoff.

WEBHOOK

risk_consent_revoked

{
  "consent_id": "c1a2b3d4-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
  "subject_id": "7e8f9a0b-1c2d-4e3f-8a9b-0c1d2e3f4a5b",
  "country": "CL",
  "doc_id": "12.345.678-5",
  "subject_type": "person",
  "purpose": "credit_evaluation",
  "status": "revoked",
  "previous_status": "pending",
  "revoked_at": "2026-08-10T10:02:11Z"
}

Authorizations

Authorization

string

header

required

Session JWT (from register/login) or API key (pk_...). X-API-Key: <token> is accepted as an alternative header.

Body

application/json

subject_id

string

country

string

doc_id

string

subject_type

enum<string>

Available options:

person,

company

purpose

enum<string>

Available options:

credit_evaluation,

tenant_screening,

hiring,

supplier_onboarding,

other

status

enum<string>

Available options:

revoked

previous_status

string

revoked_at

string<date-time>

Response

200

Return any 2xx to acknowledge the delivery.