Osano Consent Management API

Name: Osano Consent Management API
Brand: Osano Consent Management API
Availability: InStock

✓ Official Vendor SpecSecurityComplianceapiKey14 EndpointsREST

For Agents

Record and retrieve user consent, automate GDPR and CCPA data subject requests, and manage cookie consent across websites through Osano. Agents can capture consent receipts and orchestrate DSR fulfilment.

Install Jentic One Beta

Connect the Osano Consent Management API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Osano Consent Management API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with Osano Consent Management API.

Record a user's consent decision with subject ID, purpose, and timestamp

Retrieve the current and historical consent state for a given subject

Open, list, and update data subject rights requests for access, deletion, and portability

GET STARTED

Start building with Osano Consent Management API

Explore with Jentic

View OpenAPI Document

Use Cases

Patterns agents use Osano Consent Management API for, with concrete tasks.

★ Server-Side Consent Capture

Web and mobile apps post consent decisions to /consent so the consent of record lives in Osano rather than in localStorage or a cookie alone. The endpoint accepts subject ID, purpose, and decision, returning a consent receipt that can be referenced in audit logs. Integration takes a day for a single property, longer when multiple jurisdictions and purposes need separate purpose strings.

Record consent for subject 'user-42' to purpose 'marketing_email' with decision 'true' by POSTing the consent payload to /consent.

Data Subject Request Automation

Privacy teams automate intake and tracking of data subject requests with the /dsr endpoints. Agents create a request via POST /dsr with subject identifiers and request type, then list and update outstanding cases via GET and PUT /dsr/{dsrId}. This replaces email-based DSR queues and gives compliance teams a structured trail for each access, deletion, or portability request.

Create a deletion DSR for subject 'jane.doe@example.com' by POSTing to /dsr with type 'deletion', then poll GET /dsr/{dsrId} until status changes from 'open' to 'completed'.

Consent History Audit

Auditors and DPOs use GET /consent/history and GET /consent/subject/{subjectId} to reconstruct exactly what a user consented to and when. The history endpoint returns paginated decisions with timestamps and purposes, which is essential for proving compliance during regulator inquiries. Pairing this with internal user IDs lets the agent retrieve the full consent timeline for any customer in a single call.

Retrieve the consent history for subject 'user-42' by calling GET /consent/subject/user-42 and return the timeline of purpose decisions.

AI Agent Privacy Workflow via Jentic

Customer service AI agents that handle privacy questions need to look up consent and open DSRs without privileged credentials in their prompts. Through Jentic, the agent searches for 'open a data subject request', loads the POST /dsr schema, and executes the call with a scoped API key held in the vault. This keeps Osano's API key off the agent's transcript while still enabling end-to-end DSR intake.

Use Jentic to search 'open a data subject request', load the POST /dsr schema, and execute it with the customer's email and request type from the conversation.

Key Endpoints

14 endpoints — the osano consent management api is the programmatic backbone of osano's privacy platform.

METHOD

PATH

DESCRIPTION

POST

/consent

Record a consent decision

GET

/consent/{consentId}

Retrieve a consent receipt by ID

GET

/consent/subject/{subjectId}

Get all consent decisions for a subject

GET

/consent/history

List historical consent decisions

POST

/dsr

Create a data subject request

GET

/dsr

List data subject requests

GET

/dsr/{dsrId}

Get a specific DSR

PUT

/dsr/{dsrId}

Update a DSR's status

POST

/consent

Record a consent decision

GET

/consent/{consentId}

Retrieve a consent receipt by ID

GET

/consent/subject/{subjectId}

Get all consent decisions for a subject

GET

/consent/history

List historical consent decisions

POST

/dsr

Create a data subject request

Why Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

Osano API keys are stored encrypted in the Jentic vault. Agents receive scoped access tokens — the raw apiKey header value never enters the agent's context.

Intent-based discovery

Agents search by intent (e.g. 'open a data subject request') and Jentic returns the matching Osano operation with its input schema, so the agent calls /dsr or /consent without browsing the consent management reference.

Time to first call

Direct Osano integration: 1-3 days to wire up consent capture, DSR intake, and webhook handling. Through Jentic: under 1 hour — search, load schema, execute.

FAQs

Specific to using Osano Consent Management API through Jentic.

What authentication does the Osano Consent Management API use?

Osano uses an API key passed as an HTTP header. The OpenAPI spec declares a single apiKey scheme with the key supplied in a request header. Through Jentic the API key is stored encrypted in the Jentic vault and injected at call time, so it never appears in an agent prompt or logs.

Can I open a GDPR data subject request with the Osano API?

Yes. POST /dsr creates a new data subject request, accepting the subject's identifiers and the request type (access, deletion, or portability). You list outstanding cases with GET /dsr and update status with PUT /dsr/{dsrId} as the request moves through review, fulfilment, and closure.

What are the rate limits for the Osano Consent Management API?

The OpenAPI spec does not declare hard rate limits; in practice Osano applies per-tenant fair-use throttling and returns a 429 status with a Retry-After header when a tenant exceeds its limit. For high-volume consent capture, batch decisions and back off on 429.

How do I record a consent decision through Jentic?

Through Jentic, search for 'record user consent', load the POST /consent schema, and execute it with the subject ID, purpose, and decision boolean. Jentic injects the Osano API key from the vault and returns the consent receipt with its consentId.

Can the Osano API return historical consent for a single user?

Yes. GET /consent/subject/{subjectId} returns the full consent history for a subject, and GET /consent/history returns a paginated cross-subject log filtered by date or purpose. Use the per-subject endpoint when fulfilling a DSR access request, and the cross-subject log for audit reporting.

Is the Osano API free to use?

Osano has a free tier with limited monthly traffic suited for evaluation; production use is on paid plans tied to monthly visitors and properties. The API itself is included with all paid plans at no per-call cost.

Osano Consent Management API

Connect the Osano Consent Management API to your agent

Capabilities

Start building with Osano Consent Management API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs