Version: 1.0
Last Updated: July 14, 2026
The TrustArc Cookie Consent Manager (CCM) External API provides programmatic access to core CCM capabilities including website management and cookie scan initiation. This RESTful API enables third-party systems to integrate CCM workflows directly into their own pipelines, portals, and automation tooling.
Use cases include:
Before making your first API call, ensure you have the following:
All API requests are made to:
https://<your-ccm-domain>/external/v1
Replace <your-ccm-domain> with the host provided in your onboarding welcome email.
The CCM External API uses Bearer Token authentication. All requests must include a valid JWT in the Authorization header.
Authorization: Bearer <your_access_token> Content-Type: application/json
Every endpoint requires one of the following roles to be associated with the authenticated user:
| Role | Description |
|---|---|
SUPER_ADMIN |
Full access to all API operations and account management. |
ADMIN |
Access to website and scan management operations. |
DESIGNER |
Access to website and scan management operations. |
The following steps walk you through adding your first website via the API.
POST /external/v1/websites HTTP/1.1
Host: <your-ccm-domain>
Authorization: Bearer eyJhbGciOiJSUzI1NiJ9...
Content-Type: application/json
{
"cmUuid": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"websites": [
"https://example.com",
"https://shop.example.com"
]
}
All API responses return JSON. Timestamps are in ISO 8601 format. HTTP status codes follow standard semantics with CCM-specific multi-status behavior on partial failures.