REST reference
Timbro API 2026-10-01
Section titled “Timbro API 2026-10-01”Reference for payments, invoices, business setup, refunds, and webhooks.
Authentication
Section titled “Authentication”secretKey
Section titled “secretKey”Secret key. Server-side only.
Security scheme type: http
adminKey
Section titled “adminKey”Administrator key. Server-side only.
Security scheme type: http
integrationToken
Section titled “integrationToken”Access token of an integration’s machine client, such as an Odoo company, which authenticates with private_key_jwt. Request it with the /v1 resource and the scopes of one mode; a token acts in that mode only.
Security scheme type: oauth2
Flow type: clientCredentials
Token URL: https://api.timbro.do/v1/merchant_auth/oauth2/token
Scopes:
- invoices:test - Issue and read invoices, and read received documents in test mode.
- invoices:live - Issue and read invoices, and read received documents in live mode.
- payments:test - Create, read, and cancel payments and checkout tokens in test mode.
- payments:live - Create, read, and cancel payments and checkout tokens in live mode.
- refunds:test - Create and read refunds in test mode.
- refunds:live - Create and read refunds in live mode.
- sequences:live - Record the e-NCF sequences DGII granted the business in live mode.
invoiceReceiptAccess
Section titled “invoiceReceiptAccess”Server-side access token for one accepted Invoice receipt and its PDF. Grants no issuance, XML, or diagnostic authority.
Security scheme type: http