*REST API › Endpoint reference › Rentals › Quotes*

# Change the commercial status of a quote

> Moves the OPERATIVE status of the active version of the quote —`pending`, `confirmed` or `cancelled`— and leaves an optional note in the history.

Confirming a version moves ALL the others to `superseded`, including another one that was confirmed: it is the rule that leaves a single one in force, and it is not visible in the body. `superseded` cannot be set by hand; the system sets it. It does NOT touch the tax status (draft / validated): the document path is for that. It requires sales documents in the plan of the account (402 without it). Returns the full quote, the same projection as its GET.

`PATCH /api/v1/quotes/{quoteId}/status` — scope `quotes:write`

Scope: `quotes:write` · 120/min · Strict tenancy · Add-on (402) · Idempotency-Key · If-Match · MCP: `filmo_quotes_update_status`

## Authorizations

Bearer API key with the scope below. `quotes:write`

## Headers

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `Idempotency-Key` | string | No | Unique identifier of the request, chosen by the client (a UUID works). Between 1 and 255 characters: an empty header is rejected with 400 `validation_error`, because the client would believe itself protected. Repeating the same key with the SAME body within 24 h returns the stored response without executing again, with the `Idempotent-Replay: true` header. With a DIFFERENT body it returns 422. It is the safe way to retry after a network timeout. |
| `If-Match` | string | No | Optimistic locking: the `ETag` you read from the resource (or `*`). If the resource changed since, the write is rejected with `412 precondition_failed` before doing anything; read it again and retry. Without the header the write always proceeds. |

## Path parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `quoteId` | string | Yes | Quote identifier. |

## Body

Body schema: `QuoteStatusBody`

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `status` | string | Yes | New commercial status of the active version: pending (awaiting an answer), confirmed (accepted; the other versions become superseded) or cancelled (rejected or cancelled). `pending`, `confirmed`, `cancelled` |
| `notes` | string | No | Note stored in the quote history alongside the status change. |

## Request examples

*Change the commercial status of a quote*

**cURL**

```bash
curl https://app.filmo.io/api/v1/quotes/quot_8f2a1c/status \
  --request PATCH \
  --header "Authorization: Bearer $FILMO_API_KEY" \
  --header "Idempotency-Key: $(uuidgen 2>/dev/null || cat /proc/sys/kernel/random/uuid)" \
  --header 'Content-Type: application/json' \
  --data '{
  "status": "confirmed",
  "notes": "Aceptada la versión 3 por teléfono"
}'
```

**Node.js**

```javascript
fetch('https://app.filmo.io/api/v1/quotes/quot_8f2a1c/status', {
  method: 'PATCH',
  headers: {
    Authorization: 'Bearer YOUR_FILMO_API_KEY',
    'Idempotency-Key': crypto.randomUUID(),
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    status: 'confirmed',
    notes: 'Aceptada la versión 3 por teléfono'
  })
})
```

**Python**

```python
import uuid
import requests

requests.patch(
    "https://app.filmo.io/api/v1/quotes/quot_8f2a1c/status",
    headers={
      "Authorization": "Bearer YOUR_FILMO_API_KEY",
      "Idempotency-Key": str(uuid.uuid4()),
      "Content-Type": "application/json"
    },
    json={
      "status": "confirmed",
      "notes": "Aceptada la versión 3 por teléfono"
    }
)
```

## Response

Response schema: `QuoteDetailDto`

| Status | Description |
| --- | --- |
| 200 | Successful response. |
| 400 | Invalid request (validation_error): malformed query or body. `errors[]` lists every offending field with its stable code. |
| 401 | Authentication failed (unauthorized, api_key_invalid, api_key_revoked, api_key_expired, api_key_owner_inactive, api_key_owner_not_admin). |
| 402 | Add-on required (addon_required): the account plan does not include the add-on this operation needs; `requiredAddon` names it. |
| 403 | Not allowed (insufficient_scope: the API key does not have the required scope, named in `requiredScope`; forbidden: the owner of the key lacks the permission the operation requires). `insufficient_scope` is answered before the request counts against the rate limit, so it carries no `RateLimit-*` headers; `forbidden` does. |
| 404 | Resource not found (not_found): it does not exist or is outside the scope of the API key. |
| 409 | Conflict (conflict): the current state of the resource prevents the operation, a request with that Idempotency-Key is already in progress, or another conditional write (`If-Match`) held the resource for more than five seconds. `errors[0].code` says which: `in_progress` and `lock_timeout` are solved by retrying; `invalid_state` is not, because the state of the resource forbids the operation. |
| 412 | Precondition failed (precondition_failed): the `If-Match` entity tag does not match the current representation. Read the resource again and retry. |
| 422 | Idempotency-Key reused (idempotency_key_reused): the same key was used before with a different body. Change the key. |
| 429 | Rate limit exceeded (rate_limited): retry after `Retry-After` seconds; `RateLimit-*` says which quota ran out. |
| 500 | Internal error (internal_error). |

**200**

| Name | Type | Description |
| --- | --- | --- |
| `data` | object | The quote in full, as returned by the API. |
| `data.id` | string | Unique quote identifier (container). |
| `data.quoteNumber` | string | Human-readable quote number. |
| `data.versionNumber` | integer | Number of the active version of the quote. |
| `data.status` | string | Document lifecycle status of the active version: draft or validated (validated and numbered). `draft`, `validated` |
| `data.operativeStatus` | string | Commercial status of the active version: pending (awaiting an answer), confirmed (accepted), cancelled (rejected/cancelled) or superseded (replaced). `pending`, `confirmed`, `cancelled`, `superseded` |
| `data.issueDate` | string<date-time> | Issue date of the active version in ISO 8601 with offset; null if not issued. |
| `data.validUntil` | string<date-time> | Validity date of the quote in ISO 8601 with offset; null if not set. |
| `data.startDate` | string<date-time> | Start of the quoted rental period in ISO 8601 with offset. |
| `data.endDate` | string<date-time> | End of the quoted rental period in ISO 8601 with offset. |
| `data.currency` | string | Quote currency as an ISO 4217 code (for example "EUR"). |
| `data.contact` | object | Compact reference to the quote contact; null if none. |
| `data.contact.id` | string | Unique contact identifier. |
| `data.contact.name` | string | Contact name. |
| `data.orderId` | string | Identifier of the linked order; null if not linked. |
| `data.orderNumber` | string | Number of the linked order; null if not linked. |
| `data.projectId` | string | Identifier of the linked project; null if not linked. |
| `data.subTotal` | string | Subtotal before discounts and taxes, as a decimal string "1234.50" (ROUND_HALF_UP). |
| `data.discountTotal` | string | Total discounts as a decimal string "1234.50" (ROUND_HALF_UP). |
| `data.taxesPrice` | string | Tax total as a decimal string "1234.50" (ROUND_HALF_UP). |
| `data.netPrice` | string | Taxable base (net before taxes) as a decimal string "1234.50" (ROUND_HALF_UP). |
| `data.grossPrice` | string | Total including taxes, as a decimal string "1234.50" (ROUND_HALF_UP). |
| `data.totalPaid` | string | Amount collected against the quote as a decimal string "1234.50" (ROUND_HALF_UP); null if not recorded. |
| `data.createdAt` | string<date-time> | Creation date of the container in ISO 8601 with offset. |
| `data.updatedAt` | string<date-time> | Last update date in ISO 8601 with offset. |
| `data.projectName` | string | Name of the linked project; null if not linked. |
| `data.taxBreakdown` | object[] | Tax breakdown by type; null if not calculated. |
| `data.taxBreakdown.taxType` | string | Tax type key (for example "IVA_21"). |
| `data.taxBreakdown.label` | string | Human-readable tax label. |
| `data.taxBreakdown.rate` | number | Tax rate applied, as a percentage (for example 21 for 21%). |
| `data.taxBreakdown.baseAmount` | string | Taxable base the tax is applied to, as a decimal string "1234.50" (ROUND_HALF_UP). |
| `data.taxBreakdown.amount` | string | Tax amount as a decimal string "1234.50" (ROUND_HALF_UP). |
| `meta` | object | Additional information about the response. |
| `meta.warnings` | object[] | Lifecycle warnings; present only when the operation is deprecated. |
| `meta.warnings.code` | string | Stable warning code. `deprecated` |
| `meta.warnings.message` | string | For people: what is deprecated, until when, and what to use. |
| `meta.warnings.sunset` | string | Day (YYYY-MM-DD) the operation stops being served. |
| `meta.warnings.replacement` | string | `operationId` of the operation to use instead, or null if there is none. |
| `meta.warnings.link` | string | Where the deprecation is documented (the changelog). |

*Example response · 200*

```json
{
  "data": {
    "id": "quote_9f3a2b",
    "quoteNumber": "2026-0001",
    "versionNumber": 1,
    "status": "draft",
    "operativeStatus": "pending",
    "issueDate": "2026-09-01T08:00:00.000Z",
    "validUntil": "2026-09-01T08:00:00.000Z",
    "startDate": "2026-09-01T08:00:00.000Z",
    "endDate": "2026-09-01T08:00:00.000Z",
    "currency": "EUR",
    "contact": {
      "id": "contact_9f3a2b",
      "name": "Example contact"
    },
    "orderId": "order_9f3a2b",
    "orderNumber": "2026-0001",
    "projectId": "project_9f3a2b",
    "subTotal": "120.00",
    "discountTotal": "120.00",
    "taxesPrice": "120.00",
    "netPrice": "120.00",
    "grossPrice": "120.00",
    "totalPaid": "120.00",
    "createdAt": "2026-09-01T08:00:00.000Z",
    "updatedAt": "2026-09-01T08:00:00.000Z",
    "projectName": "Example project name",
    "taxBreakdown": [
      {
        "taxType": "120.00",
        "label": "Main",
        "rate": 1,
        "baseAmount": "120.00",
        "amount": "120.00"
      }
    ]
  }
}
```

## Errors

| Status | Codes | Meaning |
| --- | --- | --- |
| 400 | `validation_error` | Malformed query or body. `errors[]` lists every offending field with its stable code. |
| 402 | `addon_required` | The account plan does not include the add-on this operation needs; `requiredAddon` names it. |
| 404 | `not_found` | It does not exist or is outside the scope of the API key. |
| 409 | `conflict` | The current state of the resource prevents the operation, a request with that Idempotency-Key is already in progress, or another conditional write (`If-Match`) held the resource for more than five seconds. `errors[0].code` says which: `in_progress` and `lock_timeout` are solved by retrying; `invalid_state` is not, because the state of the resource forbids the operation. |
| 412 | `precondition_failed` | The `If-Match` entity tag does not match the current representation. Read the resource again and retry. |
| 422 | `idempotency_key_reused` | The same key was used before with a different body. Change the key. |

## Deprecation

This operation is not deprecated. Deprecations are announced with a Deprecation header and a sunset date.

---

Canonical URL: https://docs.filmo.io/rest-api/endpoint-reference/quotes/change-the-commercial-status-of-a-quote  
Last updated: 2026-10-25