---
title: "Confirm Consent (UI)"
method: POST
path: "/card/confirm-consent"
---

# Confirm Consent (UI)

`POST /card/confirm-consent`

Confirm the user's request to view sensitive PAN/PCI data, with an SMS or E-Mail OTP and a challengeId

## Headers

- `api-key` string
- `Authorization` string

## Request body

- object
  - `userId` string — The Id of the user for which to confirm the consent request
  - `challengeId` string — The challengeId which was received when initiating the consent flow
  - `verificationCode` string — 6 characters code. Default code for sandbox "123456".

## Response `200`

200

- object
  - `cardAuthToken` string

## Other responses

- `400` — 400

---

[API](https://skmtc.net/striga/apis/striga-v1.md) · [All operations](https://skmtc.net/striga/apis/striga-v1/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/striga/striga-v1/revisions/63e57aa7df45/schema)