---
title: subcontractors.sign | Doing Work API
description: The shop owner or office signs the Idaho 45-525(3) statement on a hosted page: a list (entries JSON), the "No subcontractors or suppliers over $500 on this
url: https://doingwork.work/docs/reference/subcontractors-sign/
---

# subcontractors.sign

The shop owner or office signs the Idaho 45-525(3) statement on a hosted page: a list (entries JSON), the "No subcontractors or suppliers over $500 on this job" attestation (none_attestation "yes"), or with neither, the prepared draft.

|  |  |
|---|---|
| Who | Hosted page only (a person does it in the browser) |
| REST | `POST /v1/subcontractors/sign` |
| MCP tool | Not an MCP tool |
| Writes | yes, send an Idempotency-Key |
| Area | [Idaho compliance](https://doingwork.work/docs/reference/#idaho-compliance) |

## When to use it

Never call it. The owner or office signs on the hosted page.

## What to tell the owner

Open the link and sign the statement.

## Input

| Field | Type | Required |
|---|---|---|
| `job_id` | string | yes |
| `entries` | string | no |
| `none_attestation` | string (one of yes) | no |
| `esign_consent` | string (one of yes) | yes |

## Example

```http
POST https://doingwork.work/v1/subcontractors/sign
content-type: application/json
Idempotency-Key: 3f1c...

{
  "job_id": "00000000-0000-4000-8000-000000000000",
  "esign_consent": "yes"
}
```

## Output

JSON. The response shape isn't published yet; read the fields you need and ignore the rest. Errors are `{code, message, status}`.

## Errors

| Code | Status | What to do |
|---|---|---|
| `human_only` | 403 | This step happens on a hosted page the person opens themselves. Send them the link; don't try another route. |
| `consent_required` | 400 | A person must tick a consent box on a hosted page (for example e-sign). Send them the link. |
| `invalid_input`, `invalid_token`, `rate_limited` |  | Can happen on any call. See [errors](https://doingwork.work/docs/errors/). |