Add a key contact to a deal
/deals/{deal_id}/key-contactsAdds a key contact to the deal and returns it with a Location. name and email are required, email must be a valid address of up to 255 characters, and address is at most 255 characters. A published deal accepts it. dry_run shows the result without saving it. Emits deal_key_contact.created and sends no email. DELETE /deals/{deal_id}/key-contacts/{id} undoes it.
Path parameters
The deal's id, a uuid. An unknown deal, or one the token can't see, returns 404.
Query parameters
Validate and run the call without committing it, returning what the real call would return with
meta.dry_runset.
Headers
Makes a retry safe. Send a new UUID for each new request and reuse it only to retry that request; the first response is replayed for 24 hours.
Request body
application/json, required · DealKeyContactCreate
The contact's name.
The contact's email address.
The contact's phone number.
The contact's postal address.
{
"name": "Grace Hopper",
"email": "grace@example.com",
"phone_number": "+44 20 7946 0000"
}Responses
{
"data": {
"id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
"name": "string",
"email": "string",
"phone_number": "string",
"address": "string",
"created_at": "2026-06-12T10:00:00+00:00",
"updated_at": "2026-06-12T10:00:00+00:00"
}
}Authorization failed. error.code is one of org_disabled,
ip_blocked, missing_scope, scope_disabled, user_disabled.
The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per
problem, or a code documented on the operation.
Examples
curl -X POST https://your-org-domain/kong/core/api/v2/deals/{deal_id}/key-contacts\
-H "Authorization: Bearer $HELM_API_KEY"\
-H "Content-Type: application/json"\
-d '{
"name": "Grace Hopper",
"email": "grace@example.com",
"phone_number": "+44 20 7946 0000"
}'