> ## Documentation Index
> Fetch the complete documentation index at: https://offergrid.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Record a consent revocation you received

> Call this when a customer or lead tells you to stop (a STOP text, a verbal do-not-call request). Every consent record naming your team is marked revoked, the customer is flagged `unsubscribed` for your team, and an `order.consent_revoked` event is emitted. Keeps the shared record truthful — consent given to other providers is unaffected.



## OpenAPI

````yaml /openapi/openapi-provider.json post /provider/customers/{customerId}/consent/revoke
openapi: 3.0.0
info:
  title: OfferGrid API
  description: >-
    **Provider API** - Create and manage service offerings, fulfill orders from
    resellers.


    As a provider, you can:

    - Create and publish service offerings (internet, electricity)

    - Control which resellers can access your offers (all, preferred, or
    selected)

    - View and manage orders from resellers

    - Update order fulfillment status and schedule installations

    - Track order lifecycle from pending to completion
  version: '1.0'
  contact: {}
servers:
  - url: https://api.offergrid.io
    description: Production
security: []
tags:
  - name: provider-offers
    description: 'Provider: Manage your service offerings'
  - name: provider-orders
    description: 'Provider: Fulfill orders from resellers'
  - name: provider-webhooks
    description: 'Provider: Receive order events for your offers'
paths:
  /provider/customers/{customerId}/consent/revoke:
    post:
      tags:
        - provider-customers
      summary: Record a consent revocation you received
      description: >-
        Call this when a customer or lead tells you to stop (a STOP text, a
        verbal do-not-call request). Every consent record naming your team is
        marked revoked, the customer is flagged `unsubscribed` for your team,
        and an `order.consent_revoked` event is emitted. Keeps the shared record
        truthful — consent given to other providers is unaffected.
      operationId: ProviderCustomersController_revokeConsent
      parameters:
        - name: customerId
          required: true
          in: path
          schema:
            type: string
      responses:
        '200':
          description: Revocation recorded
        '401':
          description: Missing, malformed, or revoked `x-api-key` header.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '403':
          description: >-
            Valid API key, but your team's role does not grant access to this
            endpoint.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Customer not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: Unexpected server error. Safe to retry idempotent requests.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - api-key: []
components:
  schemas:
    ErrorResponse:
      type: object
      title: Error
      description: Standard error envelope returned by every 4xx and 5xx response.
      required:
        - statusCode
        - message
      properties:
        statusCode:
          type: integer
          description: HTTP status code, repeated in the body.
          example: 404
        message:
          type: string
          description: Human-readable explanation of what went wrong.
          example: Offer not found
        error:
          type: string
          description: Short, stable name for the status code.
          example: Not Found
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: x-api-key
      description: >-
        Team API key for authentication. Your team role
        (provider/reseller/hybrid) determines which endpoints you can access.

````