Invoices
Create or update the mirror of an externally issued invoice
Keeps in Filmo a read-only copy of an invoice issued by ANOTHER system (an ERP such as Business Central), so the operations team can see it.
Request examples
curl https://app.filmo.io/api/v1/invoices/external/orig_8f2a1c/orig_8f2a1c \
--request PUT \
--header "Authorization: Bearer $FILMO_API_KEY" \
--header "Idempotency-Key: $(uuidgen 2>/dev/null || cat /proc/sys/kernel/random/uuid)" \
--header 'Content-Type: application/json' \
--data '{
"invoiceNumber": "FV26-001042",
"invoiceDate": "2026-09-15",
"dueDate": "2026-10-15",
"currency": "EUR",
"contactTaxId": "B00000000",
"lines": [
{
"description": "Alquiler de equipo de cámara (3 jornadas)",
"quantity": "3",
"unitPrice": "450.00",
"taxRate": "21"
},
{
"description": "Transporte ida y vuelta",
"quantity": "1",
"unitPrice": "120.00",
"taxType": "IVA_21"
}
],
"total": "1778.70",
"externalStatus": "issued",
"paymentStatus": "unpaid",
"originUrl": "https://businesscentral.dynamics.com/?company=Filmo&page=132&filter=FV26-001042"
}'Generated from the schema
Filmo does not issue it: it is not numbered against a Filmo series, not signed and never sent to Verifactu. It is stored validated, locked and marked as externally issued, and in Filmo it cannot be edited, voided, collected, rectified, e-invoiced or emailed: every change arrives through this same call. The key is the pair in the path: repeating it updates the same mirror, and repeating the same content changes nothing. Responds 201 when it creates the mirror and 200 when it updates it or it was already identical. The customer is resolved by contactId, then by tax ID, then by exact name (contacts are never created implicitly); one that cannot be resolved is a 400 validation_error whose errors[0]. says why: contactId (no such contact), contactTaxId (several contacts share that tax ID, or none has it and no contactName was sent) or contactName (several contacts, or none, have that name). The declared totals are checked against the lines with a tolerance of one cent per line: if they do not match it is a 400 validation_error with errors[0]. subTotal, taxTotal or total (also total when base plus taxes do not add up to it); a tax rate that cannot be recognised for a line is lines[n].. 409 if the invoice number is already used by another invoice of the account, if the key belongs to an invoice that is not a synced mirror, or if a voided mirror is sent back as issued. Returns the full invoice, the same projection as its GET.
Authorizations
Bearer API key with the scope below. invoices:write
Headers
Unique identifier of the request, chosen by the client (a UUID works). Between 1 and 255 characters: an empty header is rejected with 400 validation_error, because the client would believe itself protected. Repeating the same key with the SAME body within 24 h returns the stored response without executing again, with the Idempotent-Replay: true header. With a DIFFERENT body it returns 422. It is the safe way to retry after a network timeout.
Limits: min length 1, max length 255
Example:"9f1c2f4e-3a5b-4f6d-8e7a-0b1c2d3e4f5a"
Path parameters
Source system identifier, a lowercase slug (e.g. booqable, rentman, business_central).
Limits: pattern ^[a-z][a-z0-9_]{1,39}$
Identifier of the document in the source system.
Limits: min length 1, max length 200
Body
Body schema: InvoiceExternalUpsertBody
Invoice number exactly as issued by the source system.
Limits: min length 1, max length 60
Issue date.
Due date.
ISO 4217 currency.
Limits: min length 3, max length 3
Filmo contact identifier.
Limits: min length 1, max length 128
Customer tax ID, when its Filmo identifier is unknown.
Limits: min length 1, max length 40
Exact customer name, as a last resort.
Limits: min length 1, max length 200
Invoice lines.
Limits: min 1 items, max 500 items
Show child attributesHide child attributes
Line description.
Limits: min length 1, max length 500
Quantity.
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Unit price before taxes.
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Line discount as a percentage (0-100).
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Filmo tax type (e.g. IVA_21). When missing it is inferred from taxRate.
Tax percentage of the line (e.g. "21"). Required when taxType is missing.
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Taxable base according to the source system (checked against the lines).
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Tax total according to the source system.
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Total according to the source system.
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
issued, or voided in the source system.
Available options: issued, voided
Reason the source system voided it.
Limits: max length 500
Payment status according to the source system.
Available options: unpaid, partially_paid, paid, overpaid
Amount collected according to the source system.
Limits: pattern ^-?\d{1,13}(\.\d{1,6})?$
Link to the document in the source system (https).
Limits: max length 2048
Original PDF issued by the source system (https).
Limits: max length 2048
Internal notes.
Limits: max length 2000
Response
Successful response.
Response schema: InvoiceDetailDto
Envelope: InvoiceDetailResponse. meta. is present only when the operation is deprecated.
Headers: X-Request-Id · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · ETag · Idempotent-Replay
The invoice in full, as returned by the API.
Show child attributesHide child attributes
Unique invoice identifier.
Invoice number; null while it is a draft (the number is assigned on validation).
Document lifecycle status: draft, validated (validated and numbered) or voided.
Available options: draft, validated, voided
Whether the invoice rectifies a previous one. Invoices created in Filmo are never rectifications, and credit notes are served by /api; but /api can still return imported rectifying documents (for example from a Rentman import) with this set to true, so deduplicate them against the credit notes by number.
Issue date in ISO 8601 with offset; null while it is a draft.
Due date in ISO 8601 with offset; null if not set.
Invoice currency as an ISO 4217 code (for example "EUR").
Compact reference to the invoiced contact; null if none.
Show child attributesHide child attributes
Unique contact identifier.
Contact name.
Identifier of the source order; null if the invoice does not come from an order.
Number of the source order; null if the invoice does not come from an order.
Identifier of the linked project; null if not linked.
Subtotal before discounts and taxes, as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Total discounts as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Tax total as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Taxable base (net before taxes) as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Total including taxes, as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Amount collected to date as a decimal string "1234.50" (ROUND_HALF_UP); null if not recorded.
Limits: pattern ^-?\d+\.\d{2}$
Payment status: unpaid (nothing collected yet, also for invoices without a recorded collection), partially_paid, paid, overpaid (collected above the total), overdue (past due and unpaid) or voided (the document is voided, whatever was collected before). The paymentStatus filter uses the same values.
Available options: unpaid, partially_paid, paid, overpaid, overdue, voided
Payment method of the invoice; null if not recorded.
Creation date in ISO 8601 with offset.
Last update date in ISO 8601 with offset.
Name of the linked project; null if not linked.
Tax breakdown by type; null if not calculated.
Show child attributesHide child attributes
Tax type key (for example "IVA_21").
Human-readable tax label.
Tax rate applied, as a percentage (for example 21 for 21%).
Taxable base the tax is applied to, as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Tax amount as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Total discounts applied at product level, as a decimal string "1234.50" (ROUND_HALF_UP). productDiscountTotal + globalDiscountTotal = discountTotal.
Limits: pattern ^-?\d+\.\d{2}$
Global discount total of the document, as a decimal string "1234.50" (ROUND_HALF_UP). productDiscountTotal + globalDiscountTotal = discountTotal.
Limits: pattern ^-?\d+\.\d{2}$
Insurance total as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Deposit total as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Exchange rate applied when the currency differs from the base currency; null if not applicable.
Billing address; null if not recorded.
Show child attributesHide child attributes
Descriptive label of the address; null if not recorded.
First address line; null if not recorded.
Second address line; null if not recorded.
City; null if not recorded.
Province or region; null if not recorded.
Postal code; null if not recorded.
Country; null if not recorded.
Identifiers of the source quotes; null if the invoice does not come from quotes.
Identifiers of the source proformas; null if the invoice does not come from proformas.
Additional information about the response.
Show child attributesHide child attributes
Lifecycle warnings; present only when the operation is deprecated.
Show child attributesHide child attributes
Stable warning code.
Available options: deprecated
For people: what is deprecated, until when, and what to use.
Day (YYYY-MM-DD) the operation stops being served.
operationId of the operation to use instead, or null if there is none.
Where the deprecation is documented (the changelog).
Created: the resource did not exist yet and was created.
Response schema: InvoiceDetailDto
Envelope: InvoiceDetailResponse. meta. is present only when the operation is deprecated.
Headers: X-Request-Id · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · ETag · Idempotent-Replay
The invoice in full, as returned by the API.
Show child attributesHide child attributes
Unique invoice identifier.
Invoice number; null while it is a draft (the number is assigned on validation).
Document lifecycle status: draft, validated (validated and numbered) or voided.
Available options: draft, validated, voided
Whether the invoice rectifies a previous one. Invoices created in Filmo are never rectifications, and credit notes are served by /api; but /api can still return imported rectifying documents (for example from a Rentman import) with this set to true, so deduplicate them against the credit notes by number.
Issue date in ISO 8601 with offset; null while it is a draft.
Due date in ISO 8601 with offset; null if not set.
Invoice currency as an ISO 4217 code (for example "EUR").
Compact reference to the invoiced contact; null if none.
Show child attributesHide child attributes
Unique contact identifier.
Contact name.
Identifier of the source order; null if the invoice does not come from an order.
Number of the source order; null if the invoice does not come from an order.
Identifier of the linked project; null if not linked.
Subtotal before discounts and taxes, as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Total discounts as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Tax total as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Taxable base (net before taxes) as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Total including taxes, as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Amount collected to date as a decimal string "1234.50" (ROUND_HALF_UP); null if not recorded.
Limits: pattern ^-?\d+\.\d{2}$
Payment status: unpaid (nothing collected yet, also for invoices without a recorded collection), partially_paid, paid, overpaid (collected above the total), overdue (past due and unpaid) or voided (the document is voided, whatever was collected before). The paymentStatus filter uses the same values.
Available options: unpaid, partially_paid, paid, overpaid, overdue, voided
Payment method of the invoice; null if not recorded.
Tags attached to the invoice, with their identifier and name.
Show child attributesHide child attributes
Unique identifier of the tag.
Tag name.
Creation date in ISO 8601 with offset.
Last update date in ISO 8601 with offset.
Name of the linked project; null if not linked.
Tax breakdown by type; null if not calculated.
Show child attributesHide child attributes
Tax type key (for example "IVA_21").
Human-readable tax label.
Tax rate applied, as a percentage (for example 21 for 21%).
Taxable base the tax is applied to, as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Tax amount as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Total discounts applied at product level, as a decimal string "1234.50" (ROUND_HALF_UP). productDiscountTotal + globalDiscountTotal = discountTotal.
Limits: pattern ^-?\d+\.\d{2}$
Global discount total of the document, as a decimal string "1234.50" (ROUND_HALF_UP). productDiscountTotal + globalDiscountTotal = discountTotal.
Limits: pattern ^-?\d+\.\d{2}$
Insurance total as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Deposit total as a decimal string "1234.50" (ROUND_HALF_UP).
Limits: pattern ^-?\d+\.\d{2}$
Exchange rate applied when the currency differs from the base currency; null if not applicable.
Billing address; null if not recorded.
Show child attributesHide child attributes
Descriptive label of the address; null if not recorded.
First address line; null if not recorded.
Second address line; null if not recorded.
City; null if not recorded.
Province or region; null if not recorded.
Postal code; null if not recorded.
Country; null if not recorded.
Identifiers of the source quotes; null if the invoice does not come from quotes.
Identifiers of the source proformas; null if the invoice does not come from proformas.
Additional information about the response.
Show child attributesHide child attributes
Lifecycle warnings; present only when the operation is deprecated.
Show child attributesHide child attributes
Stable warning code.
Available options: deprecated
For people: what is deprecated, until when, and what to use.
Day (YYYY-MM-DD) the operation stops being served.
operationId of the operation to use instead, or null if there is none.
Where the deprecation is documented (the changelog).
Invalid request (validation_error): malformed query or body. errors[] lists every offending field with its stable code.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Authentication failed (unauthorized, api_key_invalid, api_key_revoked, api_key_expired, api_key_owner_inactive, api_key_owner_not_admin).
Headers: X-Request-Id · Content-Language · Idempotent-Replay
Add-on required (addon_required): the account plan does not include the add-on this operation needs; requiredAddon names it.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Not allowed (insufficient_scope: the API key does not have the required scope, named in requiredScope; forbidden: the owner of the key lacks the permission the operation requires). insufficient_scope is answered before the request counts against the rate limit, so it carries no RateLimit-* headers; forbidden does.
Headers: X-Request-Id · Content-Language · Idempotent-Replay
Resource not found (not_found): it does not exist or is outside the scope of the API key.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Conflict (conflict): the current state of the resource prevents the operation, a request with that Idempotency-Key is already in progress, or another conditional write (If-Match) held the resource for more than five seconds. errors[0]. says which: in_progress and lock_timeout are solved by retrying; invalid_state is not, because the state of the resource forbids the operation.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Idempotency-Key reused (idempotency_key_reused): the same key was used before with a different body. Change the key.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Rate limit exceeded (rate_limited): retry after Retry-After seconds; RateLimit-* says which quota ran out.
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Retry-After · Idempotent-Replay
Internal error (internal_error).
Headers: X-Request-Id · Content-Language · RateLimit-Limit · RateLimit-Remaining · RateLimit-Reset · Idempotent-Replay
Errors
| Status | Codes | Meaning |
|---|---|---|
| 400 | validation_error | Malformed query or body. errors[] lists every offending field with its stable code. |
| 402 | addon_required | The account plan does not include the add-on this operation needs; requiredAddon names it. |
| 404 | not_found | It does not exist or is outside the scope of the API key. |
| 409 | conflict | The current state of the resource prevents the operation, a request with that Idempotency-Key is already in progress, or another conditional write (If-Match) held the resource for more than five seconds. errors[0]. says which: in_progress and lock_timeout are solved by retrying; invalid_state is not, because the state of the resource forbids the operation. |
| 422 | idempotency_key_reused | The same key was used before with a different body. Change the key. |
401, 403, 429, 500 can be returned by any operation. Errors
Deprecation
This operation is not deprecated. Deprecations are announced with a Deprecation header and a sunset date. Versioning policy
Related pages
Link to this section: Related pagesFinance
Invoice
The invoice, as returned by the API.
Was this page helpful?