Invoices

Email an Invoice to its buyer

POST

/v1/invoices/{invoiceId}/deliveries

const url = 'https://api.timbro.do/v1/invoices/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/deliveries';
const options = {
  method: 'POST',
  headers: {
    'idempotency-key': 'example',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: '{"accountClaimUrl":"https://example.com","attachments":{"pdf":true,"xml":true},"recipientEmail":"hello@example.com"}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://api.timbro.do/v1/invoices/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/deliveries \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'idempotency-key: example' \
  --data '{ "accountClaimUrl": "https://example.com", "attachments": { "pdf": true, "xml": true }, "recipientEmail": "hello@example.com" }'

Authentication

secretKey
integrationToken
invoices:test
integrationToken
invoices:live

Parameters

Path parameters

invoiceId

required

string format: uuid

Header parameters

idempotency-key

required

string

>= 16 characters <= 255 characters /^[A-Za-z0-9._:-]+$/

Request body^required

application/json

Example^generated

{
  "accountClaimUrl": "https://example.com",
  "attachments": {
    "pdf": true,
    "xml": true
  },
  "recipientEmail": "hello@example.com"
}

object

recipientEmail

required

string format: email

>= 3 characters <= 320 characters

Optional fields

accountClaimUrl

An https page where the buyer keeps this purchase; the email links it, and it grants no access.

string format: uri

<= 2048 characters /^https:///

attachments

object

pdf

Attach the printed representation as {RNC}{e-NCF}.pdf.

boolean

xml

Attach the signed e-CF as {RNC}{e-NCF}.xml, DGII’s file-name standard.

boolean

Responses

200

Default Response

application/json

Response fields and codes

object

attachments

required

The files this email attaches beside its link.

object

pdf

required

boolean

xml

required

boolean

createdAt

required

string format: date-time

required

string format: uuid

invoiceId

required

string format: uuid

lastResultCode

required

string | null

link

required

string

providerDeliveryId

required

string | null

recipientEmail

required

string

state

required

string

Allowed values: pending submitted delivered bounced failed suppressed

updatedAt

required

string format: date-time

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

Idempotent-Replayed

string

Allowed value: true

true when this response replays the stored result of an earlier request with the same Idempotency-Key.

201

Default Response

application/json

Response fields and codes

object

attachments

required

The files this email attaches beside its link.

object

pdf

required

boolean

xml

required

boolean

createdAt

required

string format: date-time

required

string format: uuid

invoiceId

required

string format: uuid

lastResultCode

required

string | null

link

required

string

providerDeliveryId

required

string | null

recipientEmail

required

string

state

required

string

Allowed values: pending submitted delivered bounced failed suppressed

updatedAt

required

string format: date-time

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

Idempotent-Replayed

string

Allowed value: true

true when this response replays the stored result of an earlier request with the same Idempotency-Key.

400

The request could not be understood.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The request could not be understood.",
  "status": 400,
  "code": "parameter_missing",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: parameter_missing parameter_invalid request_body_malformed custody_certificate_malformed custody_signature_algorithm_unsupported custody_certificate_trust_profile_unsupported custody_certificate_chain_untrusted custody_certificate_purpose_unsupported source_provider_installation_request_invalid missing_idempotency_key invalid_idempotency_key malformed_json invalid_request invoice_original_invalid invalid_collection_query invalid_collection_cursor invalid_replay_scope webhook_destination_not_allowed commercial_response_motive_invalid

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 400

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

Allowed values: invalid_request unsupported_protocol unsupported_rules_version invalid_resolved_facts numbering_verifier_missing numbering_mode_not_enabled document_type_not_recognized sequence_missing sequence_not_observed_on_effective_date sequence_suspended sequence_cancelled sequence_superseded sequence_exhausted sequence_conflicting sequence_document_type_mismatch sequence_rejected_by_dgii sequence_expired sequence_range_overlap fiscal_number_capacity_exhausted invalid_fiscal_number fiscal_number_outside_authorized_range fiscal_number_before_verified_floor sequence_expiration_mismatch

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

401

The credential is missing, malformed, or no longer valid.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The credential is missing, malformed, or no longer valid.",
  "status": 401,
  "code": "api_key_missing",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: api_key_missing api_key_invalid integration_token_invalid checkout_token_invalid checkout_token_expired unauthenticated invalid_login invalid_credential credential_revoked

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 401

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

403

The credential is valid but not permitted to perform this operation.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The credential is valid but not permitted to perform this operation.",
  "status": 403,
  "code": "operation_not_permitted",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: operation_not_permitted insufficient_role service_role_not_permitted invitation_email_mismatch issuer_not_authorized

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 403

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

404

No endpoint serves this method and path, or no resource with this identifier exists within the caller’s scope.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "No endpoint serves this method and path, or no resource with this identifier exists within the caller's scope.",
  "status": 404,
  "code": "route_not_found",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: route_not_found webhook_endpoint_not_found webhook_event_not_found organization_not_found legal_issuer_not_found invitation_invalid certificate_custody_binding_not_found integration_not_found source_provider_authorization_not_found certification_test_run_document_not_found fiscal_operation_not_found invoice_not_found fiscal_artifact_not_found invoice_receipt_not_found fiscal_delivery_not_found received_document_not_found receiving_issuer_not_found

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 404

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

409

The request conflicts with the current state of the resource or with a previous request using the same Idempotency-Key.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The request conflicts with the current state of the resource or with a previous request using the same Idempotency-Key.",
  "status": 409,
  "code": "webhook_endpoint_deleted",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: webhook_endpoint_deleted webhook_endpoint_suspended email_already_registered organization_slug_taken hosted_tenant_conflict legal_issuer_already_registered onboarding_legal_issuer_identity_conflict legal_issuer_profile_incomplete already_a_member certificate_custody_binding_conflict certificate_custody_certificate_not_active certificate_custody_certificate_version_not_active integration_not_connected source_provider_authorization_required source_provider_installation_disabled source_provider_installation_removed source_provider_scope_insufficient source_provider_target_access_removed source_provider_authorization_conflict source_provider_installation_callback_replayed integration_creation_conflict integration_activation_conflict integration_activation_verification_rejected certification_environment_required certification_test_set_required certification_test_run_in_progress idempotency_key_conflict fiscal_number_already_used sequence_changed sequence_source_record_conflict source_version_stale source_predecessor_conflict source_history_requires_reconciliation source_content_conflict source_action_conflict source_command_conflict invoice_reference_conflict invoice_totals_mismatch printed_representation_profile_conflict source_record_already_fiscalized source_operation_pending source_outcome_unknown authority_rejected_replacement fiscal_operation_not_in_intervention intervention_not_resumable intervention_not_closable correction_target_unsettled correction_target_closed invoice_receipt_not_ready fiscal_delivery_outcome_conflict webhook_endpoint_registration_conflict commercial_response_decision_conflict receiving_issuer_held_elsewhere production_reception_certificate_required production_reception_integration_required production_reception_already_filed

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 409

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

413

The request body is larger than this endpoint accepts.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The request body is larger than this endpoint accepts.",
  "status": 413,
  "code": "request_body_too_large",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: request_body_too_large request_too_large

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 413

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

415

The request body carries a content type this endpoint does not accept.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The request body carries a content type this endpoint does not accept.",
  "status": 415,
  "code": "unsupported_media_type",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: unsupported_media_type

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 415

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

500

The request could not complete. Recover by the retained resource reference or retry with the same command identity.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "The request could not complete. Recover by the retained resource reference or retry with the same command identity.",
  "status": 500,
  "code": "internal_error",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: internal_error fiscal_artifact_unverified

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 500

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

503

A required service is temporarily unavailable. Retry with the same reference or command identity.

application/problem+json

Example

{
  "type": "about:blank",
  "title": "A required service is temporarily unavailable. Retry with the same reference or command identity.",
  "status": 503,
  "code": "integration_authorization_unavailable",
  "requestId": "request_000000000000000000000001"
}

Response fields and codes

RFC 9457 problem details. Every failure of this API is one of these, and each operation narrows code to the subset it can emit.

object

code

required

Stable machine-readable code. Branch on this, never on title.

string

Allowed values: integration_authorization_unavailable fiscal_delivery_unavailable source_provider_unavailable source_provider_throttled source_provider_outcome_unknown fiscal_artifact_unavailable invoice_receipt_unavailable custody_unavailable

requestId

required

string

status

required

integer format: int32

>= 400 <= 599

Allowed value: 503

title

required

string

type

required

string

Allowed values: about:blank

Optional fields

detail

string

invoiceId

Present only when the rejected request produced a Fiscal operation.

string

issuanceBlockers

Present only when the authoritative issuance rules refused to issue.

Array<string>

problems

Present only when the rejection points at a value the request carried.

Array<object>

One stable public document problem retained for a rejected admission.

object

code

required

string

message

required

string

path

required

string

Headers

request-id

required

string

Identifies this request. Quote it when you contact support.

Retry-After

string

/^[0-9]+$/

Seconds to wait before repeating this request or reading the resource again.

Email an Invoice to its buyer

Authentication

Parameters

Path parameters

Header parameters

Request bodyrequired

Examplegenerated

Responses

200

Headers

201

Headers

400

Example

Headers

401

Example

Headers

403

Example

Headers

404

Example

Headers

409

Example

Headers

413

Example

Headers

415

Example

Headers

500

Example

Headers

503

Example

Headers

Request body^required

Example^generated