Skip to main content

Consent with XMTP

Solve spam and unwanted messages with user-controlled, privacy-first consent.

XMTP's consent system gives your users complete inbox control with encrypted preferences that work across all apps built with XMTP, creating spam-free messaging experiences.


Key Takeaways
  • Spam-free messaging: Users control who can reach them with private allow/block lists
  • Network-level consent: Consent choices are stored at the network level and work across all apps built with XMTP
  • Privacy-first design: Only users see their own messaging preferences—blocked contacts aren't notified
  • Future-ready protection from spam and AI threats: Dual-layer defense with public contact rules and private consent coming soon

Inboxes are for trusted contacts only

Users decide who can reach them with private accept/block lists. When a user accepts/blocks a request, it is added to a private, encrypted list of their contacts, keeping their inbox spam-free. Only the user can see this list, and blocked users are never notified.

Spam-free inbox

When a new contact tries to message your user, you can provide UIs for unconsented message requests—outside of their inbox.

Without consent

Your user can then decide to accept or block the contact.

Consent statuses

You can then display conversations with accepted contacts in their inbox.

Accepted contact

Consent preferences are stored on the XMTP network, not in individual apps. When your user accepts or blocks a contact, their consent preferences can be synced across all apps built with XMTP. This eliminates the user frustration of managing the same contacts across multiple messaging platforms. No need to accept or block the same contact in every app.

Network-level consent

Privacy-first spam prevention

Your users' messaging preferences stay completely private. Only they can see who they've allowed or blocked. Blocked users are unaware they're blocked. This provides a spam filter that respects user privacy while keeping unwanted messages out of the main inbox.

Built for developers

XMTP's consent system automatically handles spam prevention and the complexity of cross-app consent preferences and privacy. This frees you up to focus on building great messaging experiences without worrying about having to build your own spam prevention tools.


  • Late 2025 →
    • Public contact rules that set network-level requirements for reaching someone
    • Programmable contact rules that enable users to set criteria like "allow messages from anyone who owns this NFT"

Was the information on this page helpful?
powered by XMTP