curl --request POST \
  --url https://api.ezapi.com.br/instances/{instanceId}/token/{instanceToken}/privacy/photo \
  --header 'Client-Token: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "visualizationType": "CONTACT_BLACKLIST",
  "contactsBlacklist": [
    {
      "action": "add",
      "phone": "{{PHONE}}"
    },
    {
      "action": "remove",
      "phone": "{{PHONE}}"
    }
  ]
}
'

{
  "success": true
}