Accept Legal Document

Record user acceptance of a legal document. Supported types are crossmint-privacy-policy and crossmint-terms-of-service. The latest version of the document is always recorded. When accepting crossmint-terms-of-service, the region field is required so the correct regional agreement is resolved.

API scope required: users.create

PUT /2025-06-09/users/{userLocator}/legal-documents

cURL

Privacy Policy

curl --request PUT \
  --url https://staging.crossmint.com/api/2025-06-09/users/{userLocator}/legal-documents \
  --header 'Content-Type: application/json' \
  --header 'X-API-KEY: <api-key>' \
  --data '
{
  "acceptedAt": "2025-10-05T14:48:00Z",
  "type": "crossmint-privacy-policy"
}
'

200

{
  "acceptedAt": "2024-01-15T10:30:00.000Z"
}

Authorizations

X-API-KEY · string · header · required

API key required for authentication

Path Parameters

userLocator · string · required

A user locator can be of the format:

• email:<email>
• userId:<userId>
• phoneNumber:<phoneNumber>
• twitter:<handle>
• x:<handle>

Examples:

"email:[e-mail]"

"userId:507f1f77bcf86cd799439011"

"userId:did:example:cm4lr5piw0h6t1bjho0onryql"

"phoneNumber:[phone]"

"twitter:johndoe"

"x:@johndoe"

Body

application/json

acceptedAt · string<date-time> · required

ISO 8601 in UTC. Fractional seconds are optional.

Example:

"2024-01-15T10:30:00.000Z"

type · enum<string> · required

The legal document the user is accepting.

Available options: crossmint-privacy-policy, crossmint-terms-of-service

region · enum<string>

Region the user is operating in. Required when type is crossmint-terms-of-service and determines which regional Terms of Service document is accepted. Ignored for crossmint-privacy-policy.

Available options: eu, us, worldwide

Response

200 - application/json

Legal document acceptance recorded

acceptedAt · string<date-time> · required

ISO 8601 in UTC. Fractional seconds are optional.

Example:

"2024-01-15T10:30:00.000Z"