Hubflo invoice API

openapi: 3.0.1
info:
  title: Hubflo chat_room invoice API
  version: v2
  description: "The Hubflo API allows you to write and read data from the Hubflo application.\nIt conforms to [REST](https://en.wikipedia.org/wiki/REST).\nIt has predictable resource-oriented URLS, accepts JSON request bodies, returns JSON and uses standard HTTP status codes\nand verbs.\n\n# Authentication\n\nThe Hubflo API requires authentication.\nIt's a bearer authentication, also called token authentication.\n\nTo start your integration journey with the Hubflo API, you must send your **authentication token** in the\n`Authorization` header when making requests to the API.\n\n```\nAuthorization: Bearer <token>\n```\n\n# Getting started\n\nNavigate to [https://app.hubflo.com/organizations/](https://app.hubflo.com/organizations/).\nIn the **Integrations** settings panel, click on the **Generate key** button if you don't already have an API key.\n\nThe generated API key is the required authentication token you must send in the `Authorization` header.\nLet's copy it.\n\nYou can use the `/pings` endpoint to check that you can successfully make an authenticated request.\nDo it directly from this documentation, using the **Authorize** button to paste your authentication token, then push\nthe **Try it out** button.\n\nAlternatively, you can run the following cURL command in a terminal:\n\n```\ncurl -X 'POST' \\\n  'https://app.hubflo.com/api/v2/pings' \\\n  -H 'accept: application/json' \\\n  -H 'Authorization: Bearer <token>' \\\n  -d ''\n```\n\nIf you're successfully authenticated, you receive:\n\n```json\n{\n  \"pong\": \"ok\"\n}\n```\n\nOtherwise you get a `401 - Unauthorized` error. For example:\n\n```json\n{\n  \"status\": 401,\n  \"title\": \"Unauthorized\",\n  \"message\": \"API token not found\"\n}\n```\n\n# Versioning\n\nThe API is versioned. The current version is 2.0 (referenced as v2 in the endpoints).\n\n# Routes\n\nThe API endpoints are accessible through a route of the form: `https://<domain>/api/<version>/<endpoint>`.\n\nWhere:\n\n- `domain` is the domain to use, usually \"app.hubflo.com\"\n- `version` is the API version\n- `endpoint` is the endpoint name\n\nFor example, we will have: `https://app.hubflo.com/api/v2/pings`.\n\n# Request headers\n\nEvery request should include the header `Content-Type: application/json`, except for file uploads.\n\n# Requests and parameters\n\nThe API adheres to REST principles:\n\n- `GET` requests: read without modification\n- `POST` requests: create a new resource\n- `PATCH` requests: update an existing resource\n- `DELETE` requests: delete a resource\n\nThe parameters for `GET` requests should be sent via the query string of the request.\n\nThe parameters for `POST` and `PATCH` requests should be transmitted in the request body in a valid JSON format.\n\nThe parameters should follow the following formats:\n- `date`: \"YYYY-MM-DD\", for example: \"2021-10-21\"\n- `time`: \"H:m[:s]\", for example: \"10:30\"\n- `date-time`: \"YYYY-MM-DDThh:mm:ssZ\", which is the [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601#Combined_date_and_time_representations) format, using UTC\n\n# Response headers\n\nAs specified for each endpoint, the response headers contain:\n- `Content-Type`: the response content type\n- `X-Organization-ID`: your organization ID\n- `X-Rate-Limit` the maximum allowed requests in a given period\n- `X-Remaining-Requests`: the remaining requests count in the current period\n\n# Response format\n\nThe API only supports JSON format.\nAll responses sent by the API will contain the header `Content-Type: application/json` and their content is present in\nthe body in a JSON format to be de-serialized.\n\n# Rate limit\n\nThe use of the API is limited.\nYou can make a maximum of 1000 calls per minute.\nIf you exceed this limit, you receive a `429 - Too Many Requests` error and are blocked for one minute.\n\n# Pagination\n\nAll endpoints that return lists are paginated.\nIn general, any endpoint that returns a list can return an empty list.\n\nThe (optional) `page` parameter allows you to access a specific page.\n\nThe (optional) `per_page` parameter allows you to change the number of items on a given page.\nThe default value is 20 and it is limited to a maximum of 100.\n\n# Response codes\n\nThe API may return the following codes:\n\n| Code  | Name                  | Description                                                                      |\n| ----  | --------              | --------                                                                         |\n| `200` | Success               | Success                                                                          |\n| `201` | Created               | Resource created                                                                 |\n| `204` | No Content            | Success but the response does not contain any data (e.g., deletion)              |\n| `400` | Bad Request           | The request is invalid                                                           |\n| `401` | Unauthorized          | Authentication failed                                                            |\n| `403` | Forbidden             | Insufficient rights to perform the requested action                              |\n| `404` | Not Found             | The resource is not found                                                        |\n| `422` | Unprocessable Content  | The transmitted data is malformed                                                |\n| `429` | Too Many Requests     | Too many requests have been made                                                 |\n| `500` | Internal Server Error | An internal server error occurred (the technical team is automatically notified) |\n\n# Errors\n\nWhen an error occurs, the response code informs you about what is happening.\nThe response body contains:\n- the status code,\n- the status name, a.k.a the error title,\n- a human readable message.\n\nSee the error schemas below.\n\n# Resources\n\nAll resources are identified by a unique ID that looks like this: \"16242d6f-a808-41b7-8c4d-fe29b9b3245f\".\n\nJSON data types are used at most: `string`, `number`, `float`, `object`, `array`, `boolean` and `null`.\nDates and datetimes attributes are serialized with UTC [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601#Combined_date_and_time_representations) format.\n\n\n"
servers:
- url: https://app.hubflo.com
  description: The production API server
- url: https://staging.hubflo.com
  description: The staging API server
- url: http://localhost:3000
  description: The local API server
tags:
- name: invoice
paths:
  /api/v2/invoices/{invoice_id}/deliveries:
    post:
      summary: Sends an invoice to its recipient
      security:
      - bearer_auth: []
      description: Sends an issued invoice to its recipient by email
      tags:
      - invoice
      parameters:
      - name: invoice_id
        in: path
        required: true
        description: Invoice ID
        schema:
          type: string
      responses:
        '201':
          description: Invoice sent
          headers:
            Content-Type:
              schema:
                type: string
              description: application/json; charset=utf-8
            X-Organization-ID:
              schema:
                type: string
              description: The organization ID
            X-Rate-Limit:
              schema:
                type: integer
              description: Max allowed requests in the current period
            X-Remaining-Requests:
              schema:
                type: integer
              description: Remaining requests in the current period
          content:
            application/json:
              examples:
                example:
                  value:
                    id: 97f51ab6-dac1-4266-9f0b-77e201feb82c
                    title: Invoice 1
                    description: null
                    comment: null
                    language: fr
                    purchase_order_reference: null
                    payment_terms: 'Please remit payment to: XXX.

                      Late payments may be subject to an additional charge of [X]% per month on the outstanding balance.'
                    payment_deadline_days: 30
                    payment_methods:
                    - bank_transfer
                    payment_method_used: null
                    use_stripe_as_payment_method: false
                    stripe_auto_charge: false
                    payment_url: null
                    currency: EUR
                    accounting_id: null
                    status: issued
                    created_at: '2026-07-17T13:09:31Z'
                    issued_at: '2026-07-10T13:09:31Z'
                    custom_issued_at: null
                    paid_at: null
                    sent_at: '2026-07-17T13:09:31Z'
                    net_total: 0
                    tax_total: 0
                    paid_amount: 0
                    public_url: http://localhost:3000/invoices/97f51ab6-dac1-4266-9f0b-77e201feb82c/access/f9f0df0c-a751-491e-9789-e1b3fb604242
                    owner_id: e68a6422-fdb4-4c64-922a-8ac109b3ed33
                    project_id: null
                    recipient_id: f564eb98-3aa3-4fc7-845c-e5251047b0bb
                    parent_invoice_id: null
        '401':
          description: 'unauthorized: the Authorization header is missing or invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 401
                    title: Unauthorized
                    message: Invalid API token
              schema:
                $ref: '#/components/schemas/error_unauthorized'
        '404':
          description: 'not found: the resource is not found'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 404
                    title: Not Found
                    message: Resource not found
              schema:
                $ref: '#/components/schemas/error_not_found'
        '429':
          description: 'too many requests: the user has reached the rate limit'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 429
                    title: Too Many Requests
                    message: Rate limit reached. Please wait for a couple of minutes.
              schema:
                $ref: '#/components/schemas/error_too_many_requests'
  /api/v2/invoices/{invoice_id}/issuances:
    post:
      summary: Issues an invoice
      security:
      - bearer_auth: []
      description: Changes a draft invoice status to issued
      tags:
      - invoice
      parameters:
      - name: invoice_id
        in: path
        required: true
        description: Invoice ID
        schema:
          type: string
      responses:
        '201':
          description: Invoice issued
          headers:
            Content-Type:
              schema:
                type: string
              description: application/json; charset=utf-8
            X-Organization-ID:
              schema:
                type: string
              description: The organization ID
            X-Rate-Limit:
              schema:
                type: integer
              description: Max allowed requests in the current period
            X-Remaining-Requests:
              schema:
                type: integer
              description: Remaining requests in the current period
          content:
            application/json:
              examples:
                example:
                  value:
                    id: 12009bcd-db1d-49d7-8c2d-3f91bdf3e75f
                    title: Invoice 7
                    description: null
                    comment: null
                    language: fr
                    purchase_order_reference: null
                    payment_terms: 'Please remit payment to: XXX.

                      Late payments may be subject to an additional charge of [X]% per month on the outstanding balance.'
                    payment_deadline_days: 30
                    payment_methods:
                    - bank_transfer
                    payment_method_used: null
                    use_stripe_as_payment_method: false
                    stripe_auto_charge: false
                    payment_url: null
                    currency: EUR
                    accounting_id: null
                    status: issued
                    created_at: '2026-07-17T13:09:31Z'
                    issued_at: '2026-07-17T13:09:32Z'
                    custom_issued_at: null
                    paid_at: null
                    sent_at: null
                    net_total: 2200
                    tax_total: 200
                    paid_amount: 0
                    public_url: http://localhost:3000/invoices/12009bcd-db1d-49d7-8c2d-3f91bdf3e75f/access/071a196a-77ca-4a3b-bbcf-d93fd1c3f782
                    owner_id: e68a6422-fdb4-4c64-922a-8ac109b3ed33
                    project_id: null
                    recipient_id: d68db019-eb07-423b-8c17-da81fe2f0554
                    parent_invoice_id: null
        '401':
          description: 'unauthorized: the Authorization header is missing or invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 401
                    title: Unauthorized
                    message: Invalid API token
              schema:
                $ref: '#/components/schemas/error_unauthorized'
        '429':
          description: 'too many requests: the user has reached the rate limit'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 429
                    title: Too Many Requests
                    message: Rate limit reached. Please wait for a couple of minutes.
              schema:
                $ref: '#/components/schemas/error_too_many_requests'
  /api/v2/invoices/{invoice_id}/payment-notice:
    post:
      summary: Creates a payment notice
      security:
      - bearer_auth: []
      description: Create a payment notice for a given invoice, and mark it as paid. In case of partial payment, it will add up.
      tags:
      - invoice
      parameters:
      - name: invoice_id
        in: path
        required: true
        description: Invoice ID
        schema:
          type: string
      responses:
        '201':
          description: Payment notice created (invoice marked as paid)
          headers:
            Content-Type:
              schema:
                type: string
              description: application/json; charset=utf-8
            X-Organization-ID:
              schema:
                type: string
              description: The organization ID
            X-Rate-Limit:
              schema:
                type: integer
              description: Max allowed requests in the current period
            X-Remaining-Requests:
              schema:
                type: integer
              description: Remaining requests in the current period
          content:
            application/json:
              examples:
                example:
                  value:
                    id: 3fc352f9-4128-4a4d-9094-4cacd67f7d11
                    title: Invoice 14
                    description: null
                    comment: null
                    language: fr
                    purchase_order_reference: null
                    payment_terms: 'Please remit payment to: XXX.

                      Late payments may be subject to an additional charge of [X]% per month on the outstanding balance.'
                    payment_deadline_days: 30
                    payment_methods:
                    - bank_transfer
                    payment_method_used: cash
                    use_stripe_as_payment_method: false
                    stripe_auto_charge: false
                    payment_url: null
                    currency: EUR
                    accounting_id: null
                    status: paid
                    created_at: '2026-07-17T13:09:32Z'
                    issued_at: '2026-07-10T13:09:32Z'
                    custom_issued_at: null
                    paid_at: '2024-01-01T00:00:00Z'
                    sent_at: null
                    net_total: 2200
                    tax_total: 200
                    paid_amount: 200
                    public_url: http://localhost:3000/invoices/3fc352f9-4128-4a4d-9094-4cacd67f7d11/access/beadbf63-7cfe-4e78-8060-9756fd76d1d1
                    owner_id: e68a6422-fdb4-4c64-922a-8ac109b3ed33
                    project_id: null
                    recipient_id: cdffacd6-f2b6-4bea-93a1-ca3a4d172296
                    parent_invoice_id: null
        '400':
          description: 'bad request: the request is invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 400
                    title: Bad Request
                    message: Paid at must be filled in, Payment method used must be filled in
              schema:
                $ref: '#/components/schemas/error_bad_request'
        '401':
          description: 'unauthorized: the Authorization header is missing or invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 401
                    title: Unauthorized
                    message: Invalid API token
              schema:
                $ref: '#/components/schemas/error_unauthorized'
        '404':
          description: 'not found: the resource is not found'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 404
                    title: Not Found
                    message: Resource not found
              schema:
                $ref: '#/components/schemas/error_not_found'
        '429':
          description: 'too many requests: the user has reached the rate limit'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 429
                    title: Too Many Requests
                    message: Rate limit reached. Please wait for a couple of minutes.
              schema:
                $ref: '#/components/schemas/error_too_many_requests'
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                paid_at:
                  type: string
                  format: date-time
                  example: '2024-01-01T00:00:00Z'
                payment_method_used:
                  type: string
                  enum:
                  - bank_transfer
                  - bank_card
                  - direct_debit
                  - check
                  - cash
                  - ach
                  - paypal
                  - other
                  example: bank_transfer
                paid_amount:
                  type: number
                  example: 200
              required:
              - paid_at
              - payment_method_used
              - paid_amount
        required: true
        description: Payment notice attributes
  /api/v2/invoices/{invoice_id}/payment-url:
    post:
      summary: Creates a payment URL
      security:
      - bearer_auth: []
      description: Create the payment url for a given invoice, or update it when it already exists
      tags:
      - invoice
      parameters:
      - name: invoice_id
        in: path
        required: true
        description: Invoice ID
        schema:
          type: string
      responses:
        '201':
          description: Payment URL created
          headers:
            Content-Type:
              schema:
                type: string
              description: application/json; charset=utf-8
            X-Organization-ID:
              schema:
                type: string
              description: The organization ID
            X-Rate-Limit:
              schema:
                type: integer
              description: Max allowed requests in the current period
            X-Remaining-Requests:
              schema:
                type: integer
              description: Remaining requests in the current period
          content:
            application/json:
              examples:
                example:
                  value:
                    id: fa1f56cd-5b39-47fd-be07-147dc993b071
                    title: Invoice 22
                    description: null
                    comment: null
                    language: fr
                    purchase_order_reference: null
                    payment_terms: 'Please remit payment to: XXX.

                      Late payments may be subject to an additional charge of [X]% per month on the outstanding balance.'
                    payment_deadline_days: 30
                    payment_methods:
                    - bank_transfer
                    payment_method_used: null
                    use_stripe_as_payment_method: false
                    stripe_auto_charge: false
                    payment_url: https://example.com
                    currency: EUR
                    accounting_id: null
                    status: issued
                    created_at: '2026-07-17T13:09:33Z'
                    issued_at: '2026-07-10T13:09:33Z'
                    custom_issued_at: null
                    paid_at: null
                    sent_at: null
                    net_total: 2200
                    tax_total: 200
                    paid_amount: 0
                    public_url: http://localhost:3000/invoices/fa1f56cd-5b39-47fd-be07-147dc993b071/access/c30d516f-7a44-4e67-a1ba-5b5e3c2328e7
                    owner_id: e68a6422-fdb4-4c64-922a-8ac109b3ed33
                    project_id: null
                    recipient_id: 56ffa890-9487-4f8e-a7df-cf2cd78e58bd
                    parent_invoice_id: null
        '401':
          description: 'unauthorized: the Authorization header is missing or invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 401
                    title: Unauthorized
                    message: Invalid API token
              schema:
                $ref: '#/components/schemas/error_unauthorized'
        '404':
          description: 'not found: the resource is not found'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 404
                    title: Not Found
                    message: Resource not found
              schema:
                $ref: '#/components/schemas/error_not_found'
        '429':
          description: 'too many requests: the user has reached the rate limit'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 429
                    title: Too Many Requests
                    message: Rate limit reached. Please wait for a couple of minutes.
              schema:
                $ref: '#/components/schemas/error_too_many_requests'
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                value:
                  type: string
                  format: uri
                  example: https://example.com
        required: true
        description: Payment URL attributes
  /api/v2/invoices/{invoice_id}/line-items:
    get:
      summary: Retrieves the line_items
      security:
      - bearer_auth: []
      description: Returns the line_items
      tags:
      - invoice
      parameters:
      - name: page
        in: query
        required: false
        description: Page number
        example: 1
        schema:
          type: number
      - name: per_page
        in: query
        required: false
        description: Number of items per page (max 100)
        example: 10
        schema:
          type: number
      - name: invoice_id
        in: path
        required: true
        description: Invoice ID
        schema:
          type: string
      responses:
        '200':
          description: Line items retrieved
          headers:
            Content-Type:
              schema:
                type: string
              description: application/json; charset=utf-8
            X-Organization-ID:
              schema:
                type: string
              description: The organization ID
            X-Rate-Limit:
              schema:
                type: integer
              description: Max allowed requests in the current period
            X-Remaining-Requests:
              schema:
                type: integer
              description: Remaining requests in the current period
            X-Page:
              schema:
                type: integer
              description: Current page number
            X-Per-Page:
              schema:
                type: integer
              description: Number of items per page
            X-Total-Pages:
              schema:
                type: integer
              description: Total number of pages
            X-Next-Page:
              schema:
                type: integer
                nullable: true
              description: Next page number
            X-Prev-Page:
              schema:
                type: integer
                nullable: true
              description: Previous page number
            X-Total-Count:
              schema:
                type: integer
              description: Total number of items
          content:
            application/json:
              examples:
                example:
                  value:
                  - id: 89a1c329-4a36-4f44-a575-d635e4da7ccc
                    title: Quote item 20
                    description: null
                    currency: EUR
                    kind: none
                    quantity: 1
                    discount_percentage: 0
                    unit_price_excluding_tax: 2000
                    unit_cost_excluding_tax: 0
                    total_excluding_tax: 2000
                    total_including_tax: 2200
                    vat: 10
                    created_at: '2026-07-17T13:09:34Z'
                  - id: 425e9d2c-375b-469a-8edc-983b68b2408f
                    title: Quote item 21
                    description: null
                    currency: EUR
                    kind: none
                    quantity: 1
                    discount_percentage: 0
                    unit_price_excluding_tax: 2000
                    unit_cost_excluding_tax: 0
                    total_excluding_tax: 2000
                    total_including_tax: 2200
                    vat: 10
                    created_at: '2026-07-17T13:09:34Z'
        '401':
          description: 'unauthorized: the Authorization header is missing or invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 401
                    title: Unauthorized
                    message: Invalid API token
              schema:
                $ref: '#/components/schemas/error_unauthorized'
        '404':
          description: 'not found: the resource is not found'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 404
                    title: Not Found
                    message: Resource not found
              schema:
                $ref: '#/components/schemas/error_not_found'
        '429':
          description: 'too many requests: the user has reached the rate limit'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 429
                    title: Too Many Requests
                    message: Rate limit reached. Please wait for a couple of minutes.
              schema:
                $ref: '#/components/schemas/error_too_many_requests'
    post:
      summary: Creates a line item for an invoice
      security:
      - bearer_auth: []
      description: Adds a new line item to an existing draft invoice
      tags:
      - invoice
      parameters:
      - name: invoice_id
        in: path
        required: true
        description: Invoice ID
        schema:
          type: string
      responses:
        '201':
          description: Line item created
          headers:
            Content-Type:
              schema:
                type: string
              description: application/json; charset=utf-8
            X-Organization-ID:
              schema:
                type: string
              description: The organization ID
            X-Rate-Limit:
              schema:
                type: integer
              description: Max allowed requests in the current period
            X-Remaining-Requests:
              schema:
                type: integer
              description: Remaining requests in the current period
          content:
            application/json:
              examples:
                example:
                  value:
                    id: 8f0560e4-3cdb-4350-a755-016e03db0ba4
                    title: Web Development
                    description: Creation of a responsive website
                    currency: EUR
                    kind: service
                    quantity: 1
                    discount_percentage: 0
                    unit_price_excluding_tax: 1000
                    unit_cost_excluding_tax: 500
                    total_excluding_tax: 1000
                    total_including_tax: 1200
                    vat: 20
                    created_at: '2026-07-17T13:09:35Z'
        '401':
          description: 'unauthorized: the Authorization header is missing or invalid'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 401
                    title: Unauthorized
                    message: Invalid API token
              schema:
                $ref: '#/components/schemas/error_unauthorized'
        '422':
          description: 'unprocessable content: the resource can''t be created'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 422
                    title: Unprocessable Content
                    message: 'Validation failed: Quantity must be greater than or equal to 0.1, VAT is not a number'
              schema:
                $ref: '#/components/schemas/error_unprocessable_content'
        '429':
          description: 'too many requests: the user has reached the rate limit'
          content:
            application/json:
              examples:
                example:
                  value:
                    status: 429
                    title: Too Many Requests
                    message: Rate limit reached. Please wait for a couple of minutes.
              schema:
                $ref: '#/components/schemas/error_too_many_requests'
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                title:
                  type: string
                  example: Web Development
                description:
                  type: string
                  example: Creation of a responsive website
                quantity:
                  type: integer
                  example: 2
                  minimum: 1
                discount_percentage:
                  type: integer
                  example: 0
                  minimum: 0
                  maximum: 100
                unit_price_excluding_tax:
                  type: integer
                  example: 1000
                  minimum: 0
                unit_cost_excluding_tax:
    

# --- truncated at 32 KB (67 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/hubflo/refs/heads/main/openapi/hubflo-invoice-api-openapi.yml