Concord Site API Overview

Overview

The Concord Site API (Site V1) provides client-side access to Concord's consent and compliance services, typically for website and app integrations. With it you can:

• Record and validate consent events: privacy policy, terms of service, and other legal disclosures, cookie consent, and custom opt-ins and opt-outs such as email or SMS.
• Capture and verify compliance requests.
• Identify visitors and keep their consent in sync.

The Concord script you install on your website is loaded from this API, so most sites never call it directly. Use it when you build a custom consent experience or need consent data inside your own app.

Base URL

https://api.concord.tech/site-v1

Every path except the health check starts with your project ID:

/{projectId}/consent-state

Find the project ID in Concord under Deployment → Installation → Install Concord.

Authentication

Requests identify the current visitor with a session token in the x-session header. Call Get session token to get one, then send it on later requests. The Site API never takes an organization API key, so it is safe to call from the browser.

Endpoint Groups

• Session and Identity (match a visitor by email or context ID and merge their consent)
• Consent Events, Consent State, and Consent Types
• Compliance Requests
• IAB TCF: TC String Data, Purposes, Global Vendor List, and Update Consent
• Health Check

For server-side access to your organization's data, use the Concord Privacy API.

OpenAPI Specification

The full specification is published at api.concord.tech/docs/json/site-v1/ for code generators and API clients.