Where consent is the basis for processing a child's personal data in connection with an information society service offered directly to the child, the processing is lawful with the child's own consent from the age of 13 (the lowest age GDPR Article 8(1) allows, instead of its default of 16); below 13 the GDPR itself requires consent given or authorised by the holder of parental responsibility, with reasonable efforts to verify it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.