`signing.envelopes.signAsMember`

Sign as the assigned company signer from a signed-in Oatmilk session (dashboard only, never API keys or agents): consent, typed or drawn signature, name, and title are recorded with the document hash, time, IP address, and device.

POST/api/v1/accounting/signing.envelopes.signAsMember

Permissions

accounting:readaccounting:write

Who can call it

admin, finance

Retries

Idempotency key required

MCP

Not offered over MCP: A person's own e-signature, with their signed-in session.

Fields

idstring (ID)Required
The record's ID.
recipientIdstring (ID)Required
The ID of one signer on a document.
documentSha256stringRequired
SHA-256 hash as 64 lowercase hex characters
consenttrueRequired
consentVersionstringRequired
Matches ^[0-9a-z.-]{1,40}$
signatureobjectRequired
signedNamestringRequired
1–200 characters
signedTitlestring
at most 200 characters
idempotencyKeystringRequired
Any unique text you generate once per intended change, so a retried request only happens once. Send it as the Idempotency-Key header instead if you prefer; if you send both they must match.
8–200 characters

curl https://app.getoatmilk.com/api/v1/accounting/signing.envelopes.signAsMember \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
  "recipientId": "4d5e6f7a-8b9c-4d0e-8f1a-2b3c4d5e6f7a",
  "documentSha256": "9f2b5c1d7e3a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b4c",
  "consent": true,
  "consentVersion": "example",
  "signature": {
    "method": "typed",
    "text": "example"
  },
  "signedName": "Synthetic Ventures Inc."
}'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/signing.envelopes.signAsMember", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    "recipientId": "4d5e6f7a-8b9c-4d0e-8f1a-2b3c4d5e6f7a",
    "documentSha256": "9f2b5c1d7e3a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b4c",
    "consent": true,
    "consentVersion": "example",
    "signature": {
      "method": "typed",
      "text": "example"
    },
    "signedName": "Synthetic Ventures Inc."
  }),
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os
import uuid

import requests

response = requests.post(
    "https://app.getoatmilk.com/api/v1/accounting/signing.envelopes.signAsMember",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "recipientId": "4d5e6f7a-8b9c-4d0e-8f1a-2b3c4d5e6f7a",
        "documentSha256": "9f2b5c1d7e3a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b4c",
        "consent": True,
        "consentVersion": "example",
        "signature": {
            "method": "typed",
            "text": "example",
        },
        "signedName": "Synthetic Ventures Inc.",
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Response

{
  "data": { … }
}

Try it

Checks your input with this action’s real schema and answers like the API, with synthetic data. No key needed, and nothing changes.

Input

POST/api/v1/accounting/signing.envelopes.signAsMember

curl https://app.getoatmilk.com/api/v1/accounting/signing.envelopes.signAsMember \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
  "recipientId": "4d5e6f7a-8b9c-4d0e-8f1a-2b3c4d5e6f7a",
  "documentSha256": "9f2b5c1d7e3a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b4c",
  "consent": true,
  "consentVersion": "example",
  "signature": {
    "method": "typed",
    "text": "example"
  },
  "signedName": "Synthetic Ventures Inc."
}'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/signing.envelopes.signAsMember", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    "recipientId": "4d5e6f7a-8b9c-4d0e-8f1a-2b3c4d5e6f7a",
    "documentSha256": "9f2b5c1d7e3a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b4c",
    "consent": true,
    "consentVersion": "example",
    "signature": {
      "method": "typed",
      "text": "example"
    },
    "signedName": "Synthetic Ventures Inc."
  }),
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os
import uuid

import requests

response = requests.post(
    "https://app.getoatmilk.com/api/v1/accounting/signing.envelopes.signAsMember",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "recipientId": "4d5e6f7a-8b9c-4d0e-8f1a-2b3c4d5e6f7a",
        "documentSha256": "9f2b5c1d7e3a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b4c",
        "consent": True,
        "consentVersion": "example",
        "signature": {
            "method": "typed",
            "text": "example",
        },
        "signedName": "Synthetic Ventures Inc.",
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Fields

Fields inside signature

Example

Try it