Umbraco Engage, Engage Headless API + GDPR consent

What’s best practice to handle headless engage API and cookie consent?

The client API won’t read client cookies and our IModulePermissions won’t apply to this endpoint?

Should we check if analytics is approved, then and only then send a request to the client API endpoint?