Contacts
Create a contact
Creates a contact with domain validation (email, NIF, field allow-list).
Request examples
curl https://app.filmo.io/api/v1/contacts \
--request POST \
--header "Authorization: Bearer $FILMO_API_KEY" \
--header "Idempotency-Key: $(uuidgen 2>/dev/null || cat /proc/sys/kernel/random/uuid)" \
--header 'Content-Type: application/json' \
--data '{
"name": "Producciones Delta S.L.",
"contactType": "company",
"role": "client",
"nif": "00000000T",
"email": "hola@example.com",
"phone": "+34 600 000 000",
"addressLine1": "Calle de la Cámara 12",
"city": "Madrid",
"province": "Madrid",
"postcode": "28001",
"country": "ES",
"preferredLanguage": "es-ES",
"currency": "EUR"
}'Generated from the schema
Returns the created contact in detail.
Authorizations
Bearer API key with the scope below. contacts:write
Headers
Unique identifier of the request, chosen by the client (a UUID works). Between 1 and 255 characters: an empty header is rejected with 400 validation_error, because the client would believe itself protected. Repeating the same key with the SAME body within 24 h returns the stored response without executing again, with the Idempotent-Replay: true header. With a DIFFERENT body it returns 422. It is the safe way to retry after a network timeout.
Limits: min length 1, max length 255
Example:"9f1c2f4e-3a5b-4f6d-8e7a-0b1c2d3e4f5a"
Optimistic locking: the ETag you read from the resource (or *). If the resource changed since, the write is rejected with 412 precondition_failed before doing anything; read it again and retry. Without the header the write always proceeds.
Example:"\"3sT3d9pBvZq4h2N0w8x1YkLmQ7c\""
Body
Body schema: ContactCreateBody
Contact name (person or company). Required.
Limits: min length 1, max length 200
Contact type: person (individual) or company (business).
Available options: person, company
Contact role: client, provider, lead, debtor, creditor, student, teacher or unspecified.
Available options: client, provider, lead, debtor, creditor, student, teacher, unspecified
NIF/CIF or tax identification number of the contact.
Limits: max length 20
Trade name, if it differs from the legal name.
Limits: max length 200
Job title or position of the contact person.
Limits: max length 200
Contact email address; the format is validated.
Limits: max length 200
Contact phone number.
Limits: max length 50
First line of the address (street and number).
Limits: max length 300
Second line of the address (floor, door, etc.).
Limits: max length 300
City of the address.
Limits: max length 200
Province or region of the address.
Limits: max length 200
Postcode of the address.
Limits: max length 20
Country of the address (code or short name).
Limits: max length 10
Folder or organizational grouping of the contact.
Limits: max length 200
Contact number assigned by the account (internal reference).
Limits: max length 50
Preferred language of the contact for communications and documents.
Available options: es-ES, en-US, fr-FR, ca-ES, de-DE, pl-PL
Default currency of the contact as a 3-letter ISO 4217 code (e.g. "EUR").
Limits: min length 3, max length 3
Whether the contact is subscribed to marketing communications.
Response
Successful response.
Response schema: ContactDetailDto
Envelope: ContactDetailResponse. meta. is present only when the operation is deprecated.
Headers: X-Request-Id · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · ETag · Idempotent-Replay
The contact in full, as returned by the API.
Show child attributesHide child attributes
Unique identifier of the contact.
Contact name (person or company).
Contact type: person (individual) or company (business).
Available options: person, company
Contact role: client, provider, lead, debtor, creditor, student, teacher or unspecified.
Available options: client, provider, lead, debtor, creditor, student, teacher, unspecified
Contact status: active (operational), inactive (deactivated) or archived (closed, kept for historical records).
Available options: active, inactive, archived
NIF/CIF or tax identification number; null if not recorded.
Trade name; null if it matches the name or is not recorded.
Job title or position of the contact person; null if not recorded.
Contact number assigned by the account (internal reference); null if not recorded.
List of email addresses of the contact.
Show child attributesHide child attributes
Internal identifier of the email within the contact.
Descriptive label of the email; null if it has none.
Email address.
Whether this is the primary email of the contact.
Dedicated billing email; null means the primary email is used.
List of phone numbers of the contact.
Show child attributesHide child attributes
Internal identifier of the phone number within the contact.
Descriptive label of the phone number; null if it has none.
Phone number.
International country calling code (e.g. "+34"); null if not recorded.
Whether this is the primary phone number of the contact.
List of websites of the contact.
Show child attributesHide child attributes
Internal identifier of the website within the contact.
Descriptive label of the website; null if it has none.
Website URL.
List of addresses of the contact.
Show child attributesHide child attributes
Internal identifier of the address within the contact.
Descriptive label of the address; null if it has none.
First line of the address; null if not recorded.
Second line of the address; null if not recorded.
City; null if not recorded.
Province or region; null if not recorded.
Postcode; null if not recorded.
Country; null if not recorded.
Whether this is the main address of the contact.
Folder or organizational grouping; null if the contact is not classified.
General discount percentage of the contact (0-100); null if no discount is configured.
Preferred language of the contact; null if not recorded.
Default currency of the contact as an ISO 4217 code; null if not recorded.
Preferred payment method of the contact; null if not configured.
Show child attributesHide child attributes
Payment method type: bank_transfer, card, cash, sepa_direct_debit or other.
Available options: bank_transfer, card, cash, other, sepa_direct_debit
Free-text detail when the type is "other" (for example a method recorded before it was configured); null otherwise.
Days of the month on which the contact makes payments; null if not configured.
Default due days for the invoices of the contact; null if not configured.
Whether the contact is subscribed to marketing communications.
Whether the contact has access to the app.
Custom field values by custom field identifier; the definitions are in /api.
Creation date in ISO 8601 with offset.
Last update date in ISO 8601 with offset.
Additional information about the response.
Show child attributesHide child attributes
Lifecycle warnings; present only when the operation is deprecated.
Show child attributesHide child attributes
Stable warning code.
Available options: deprecated
For people: what is deprecated, until when, and what to use.
Day (YYYY-MM-DD) the operation stops being served.
operationId of the operation to use instead, or null if there is none.
Where the deprecation is documented (the changelog).
Invalid request (validation_error): malformed query or body. errors[] lists every offending field with its stable code.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Authentication failed (unauthorized, api_key_invalid, api_key_revoked, api_key_expired, api_key_owner_inactive, api_key_owner_not_admin).
Headers: X-Request-Id · Content-Language · Idempotent-Replay
Not allowed (insufficient_scope: the API key does not have the required scope, named in requiredScope; forbidden: the owner of the key lacks the permission the operation requires). insufficient_scope is answered before the request counts against the rate limit, so it carries no RateLimit-* headers; forbidden does.
Headers: X-Request-Id · Content-Language · Idempotent-Replay
Resource not found (not_found): it does not exist or is outside the scope of the API key.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Conflict (conflict): the current state of the resource prevents the operation, a request with that Idempotency-Key is already in progress, or another conditional write (If-Match) held the resource for more than five seconds. errors[0]. says which: in_progress and lock_timeout are solved by retrying; invalid_state is not, because the state of the resource forbids the operation.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Precondition failed (precondition_failed): the If-Match entity tag does not match the current representation. Read the resource again and retry.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Idempotency-Key reused (idempotency_key_reused): the same key was used before with a different body. Change the key.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Rate limit exceeded (rate_limited): retry after Retry-After seconds; RateLimit-* says which quota ran out.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Retry-After · Idempotent-Replay
Internal error (internal_error).
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Errors
| Status | Codes | Meaning |
|---|---|---|
| 400 | validation_error | Malformed query or body. errors[] lists every offending field with its stable code. |
| 404 | not_found | It does not exist or is outside the scope of the API key. |
| 409 | conflict | The current state of the resource prevents the operation, a request with that Idempotency-Key is already in progress, or another conditional write (If-Match) held the resource for more than five seconds. errors[0]. says which: in_progress and lock_timeout are solved by retrying; invalid_state is not, because the state of the resource forbids the operation. |
| 412 | precondition_failed | The If-Match entity tag does not match the current representation. Read the resource again and retry. |
| 422 | idempotency_key_reused | The same key was used before with a different body. Change the key. |
401, 403, 429, 500 can be returned by any operation. Errors
Deprecation
This operation is not deprecated. Deprecations are announced with a Deprecation header and a sunset date. Versioning policy
Related pages
Link to this section: Related pagesCRM
Contact
The contact, as returned by the API.
Was this page helpful?