> ## Documentation Index > Fetch the complete documentation index at: https://docs.fundor.io/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Fundor Partner API. NON-NEGOTIABLE CONSENT RULES for anyone (human or AI) writing code against this API: (1) Call GET /consent every time the referral form is shown and display consent.text EXACTLY, next to a checkbox that starts UNCHECKED. (2) Only the person whose phone number is entered may check it; never pre-check it, never set consent.given=true in code without that click, never submit a lead on someone's behalf. (3) POST /leads must include consent.given=true, consent.version, the single-use consent.token, consent.consentedAt (within 15 minutes), the person's own IP and user agent (not your server's), consent.phone equal to contact.phone, and your consent.recordId. Fundor rejects the lead with 400 and saves nothing if any is missing or wrong. Do not 'fix' a consent error by filling in values; fix the form. (4) Keep consent records for 5 years. (5) Keep API keys on your server only. (6) Show the 'Powered by Fundor' badge on every screen that uses Fundor. # Get an athlete's hosted referral link and QR code > One link per active team. Customers who open it fill in Fundor's own referral page, so Fundor collects their consent; those leads are still attributed to you through the athlete. Requires the `users` scope. ## OpenAPI ````yaml GET /users/{id}/referral-link openapi: 3.1.0 info: title: Fundor Partner API version: 1.0.0 description: >- Send sign-ups, teams, applications and referrals (leads) into Fundor from your own app. Every record is attributed to your partner account. **Read the Consent requirements page before you build: a lead without full consent evidence is rejected and never saved.** contact: name: Fundor partnerships email: taylor@fundor.io servers: - url: https://www.fundor.io/api/v1 description: Production security: - apiKey: [] tags: - name: Consent & services - name: Users - name: Teams - name: Leads - name: Applications paths: /users/{id}/referral-link: get: tags: - Users summary: Get an athlete's hosted referral link and QR code description: >- One link per active team. Customers who open it fill in Fundor's own referral page, so Fundor collects their consent; those leads are still attributed to you through the athlete. Requires the `users` scope. operationId: getReferralLink parameters: - name: id in: path required: true schema: type: string format: uuid - name: teamId in: query required: false schema: type: string format: uuid description: Only this team. responses: '200': description: Referral links. content: application/json: schema: type: object properties: userId: type: string format: uuid links: type: array items: allOf: - type: object properties: teamMemberId: type: string format: uuid teamId: type: string format: uuid teamName: type: string - $ref: '#/components/schemas/ReferralLink' '401': description: >- Missing, unknown or revoked API key. Possible `error.code` values: `missing_api_key`, `invalid_api_key`, `revoked_api_key`. content: application/json: schema: $ref: '#/components/schemas/Error' '403': description: >- Partner suspended, current agreement not signed, missing scope, or the record isn't yours. Possible `error.code` values: `partner_suspended`, `agreement_required`, `insufficient_scope`, `forbidden`. content: application/json: schema: $ref: '#/components/schemas/Error' '404': description: >- Not an active athlete on a team yet. Possible `error.code` values: `not_found`. content: application/json: schema: $ref: '#/components/schemas/Error' '429': description: >- Over this key's per-minute rate limit. Possible `error.code` values: `rate_limited`. content: application/json: schema: $ref: '#/components/schemas/Error' '500': description: >- Unexpected error. Safe to retry with the same externalRef. Possible `error.code` values: `server_error`. content: application/json: schema: $ref: '#/components/schemas/Error' components: schemas: ReferralLink: type: object properties: url: type: string format: uri description: >- Hosted fundor.io referral page for this athlete. Customers who use it give consent on Fundor's own page. qrCodeSvg: type: string description: QR code for `url`, as an SVG document. qrCodeDataUrl: type: string description: >- The same QR code as a `data:image/svg+xml;base64,…` URL you can put in an `` tag. Error: type: object required: - error properties: error: type: object required: - code - message properties: code: type: string description: Stable machine-readable code. message: type: string description: Human-readable explanation. May change. field: type: string description: >- The request field at fault, when there is one (e.g. `consent.ip`). requiredVersion: type: string description: >- Only on `agreement_required`: the agreement version Fundor needs on file. example: error: code: consent_required message: consent.ip is required. Fundor will reject the lead without it. field: consent.ip securitySchemes: apiKey: type: http scheme: bearer bearerFormat: fnd_live_… description: >- Your partner API key, sent as `Authorization: Bearer fnd_live_…`. Keys are issued by Fundor on request. Keep them on your server; never ship one in a mobile or browser app. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.