curl --request POST \
  --url https://api.bluumfinance.com/v1/investors/{investor_id}/disclosures/acceptances \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "disclosure_id": "hyc_non_shariah_new_customer_ack",
  "signed_at": "2026-05-23T15:04:11Z"
}
'

{
  "object": "disclosure_acceptance",
  "id": "<string>",
  "created": 123,
  "data": {
    "investor_id": "<string>",
    "disclosure_id": "<string>",
    "version": "<string>",
    "signed_at": "2023-11-07T05:31:56Z",
    "ip_address": "<string>",
    "user_agent": "<string>",
    "actor_ref": "<string>"
  },
  "livemode": true,
  "metadata": {}
}

Disclosures

Record a disclosure acceptance

Records an end-user’s explicit acceptance of a disclosure (the “checkbox click”). Used when the partner is recording the acknowledgement out-of-band from POST /v1/investors — for example, when the user accepts a disclosure in-app after their account was already created, or when re-prompting after a version bump.

For Alpaca-required acknowledgements that map to an Alpaca agreement key (customer_agreement, w8ben_certification), prefer submitting via the signed_agreements[] array on POST /v1/investors so Alpaca receives the acceptance at account-create time. Use this endpoint for post-hoc acceptances or Bluum-only disclosures.

POST

/

investors

/

{investor_id}

/

disclosures

/

acceptances

curl --request POST \
  --url https://api.bluumfinance.com/v1/investors/{investor_id}/disclosures/acceptances \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "disclosure_id": "hyc_non_shariah_new_customer_ack",
  "signed_at": "2026-05-23T15:04:11Z"
}
'

{
  "object": "disclosure_acceptance",
  "id": "<string>",
  "created": 123,
  "data": {
    "investor_id": "<string>",
    "disclosure_id": "<string>",
    "version": "<string>",
    "signed_at": "2023-11-07T05:31:56Z",
    "ip_address": "<string>",
    "user_agent": "<string>",
    "actor_ref": "<string>"
  },
  "livemode": true,
  "metadata": {}
}

Authorizations

Authorization

string

header

required

HTTP Basic Authentication using the API Key as username and API Secret as password.

Path Parameters

investor_id

string

required

Prefixed public investor id (inv_…).

Body

application/json

disclosure_id

string

required

Stable id from the disclosure registry.

Example:

"hyc_non_shariah_new_customer_ack"

version

string

Version the user is acknowledging. If omitted the server stamps the current version from the registry.

Example:

"2026-05-23"

signed_at

string<date-time>

ISO-8601 timestamp of the click. Defaults to server time.

ip_address

string

Client IP that performed the click. Defaults to request IP.

user_agent

string

Client user-agent string. Defaults to the request User-Agent header.

actor_ref

string

Partner-defined reference for the acting user (e.g. session id, dashboard user id).

metadata

object

Response

Acceptance recorded.

object

enum<string>

required

Available options:

disclosure_acceptance

id

string

required

Stable id for the acceptance record.

created

integer<int64>

required

Unix timestamp when the acceptance was recorded.

data

object

required

Show child attributes

livemode

boolean

metadata

object

Show child attributes

List an investor's disclosure acceptances Enroll in cash sweep