API-first

Die Invonio-API

Jeder Bildschirm in Invonio — Web und Mobil — basiert auf genau dieser API. Was Sie von Hand tun, können Sie automatisieren: API-Tokens für Ihre eigenen Tools gibt es im Business-Tarif.

OpenAPI-Spezifikation herunterladen Business-Preise ansehen

Schnellstart

Token erstellen, Rechnung erstellen

# Business plan: Account → API tokens → "Create token"
# => 1|abcdef...  (shown once)

curl https://invonio.talivio.com/api/v1/invoices \
  -H "Authorization: Bearer 1|abcdef..." \
  -H "Content-Type: application/json" \
  -X POST -d '{
    "number": "RE-2026-0001",
    "issue_date": "2026-07-09",
    "buyer_name": "Kunde GmbH",
    "buyer_address_line1": "Musterstraße 1",
    "buyer_postal_code": "10115",
    "buyer_city": "Berlin",
    "buyer_country_code": "DE",
    "lines": [
      { "name": "Consulting", "quantity": 5, "unit_price": 150, "vat_rate": 19, "unit_code": "HUR" }
    ]
  }'

API-Tokens für Ihre eigenen Tools (Konto → API-Tokens) gehören zum Business-Tarif; ein Token, dessen Konto nicht im Business-Tarif ist, erhält 403. Eine neue Rechnung über die kostenlosen hinaus (POST /invoices, /duplicate) liefert 402, bis ein Abonnement aktiv ist; Peppol-Versand über das Monatskontingent hinaus liefert 429.

Referenz

Ressourcen

Auth

POST /auth/register, POST /auth/login, POST /auth/logout — Sanctum bearer tokens, one per device/integration.

Billing

GET /billing, POST /billing/checkout, GET /billing/portal — subscription status and Stripe-hosted URLs.

Business

GET/PUT /business — the seller profile stamped on every invoice you issue.

Invoices

GET/POST /invoices, plus per-invoice /document, /send, /duplicate, /credit-note, /validate. Full CRUD; a sent invoice is locked (immutable, as required by law) — duplicate or issue a credit note instead.

Incoming invoices

GET /incoming, POST /incoming (upload PDF/XML), /download — the same parser behind the inbox screen.

Stats & channels

GET /stats (dashboard summary), GET /channels (available send channels — email is always on; Peppol and the France PDP channel appear once configured).

Details

Konventionen

Create a personal access token under Account → API tokens (Business plan) and send Authorization: Bearer {token} on every request. Tokens can be revoked individually from the same page. If the account leaves the Business plan, its API tokens answer 403 until it is back.

Only the invoice-issuing endpoints (/invoices/*, /channels, /peppol/verify-recipient) require an active subscription — a 402 means the token is valid but the account isn't subscribed yet. Everything else, including /business, /incoming, and /stats, is free. Call POST /billing/checkout (plan: list|business, interval: month|year) to get a Stripe Checkout URL.

Peppol sending is in beta with a monthly quota per account. POST /invoices/{id}/send with channel=peppol beyond it returns 429 (code: peppol_quota_exhausted) and the invoice stays a draft; sending by email is not limited this way.

GET /invoices/{id}/document?format= accepts zugferd-en16931 (Factur-X PDF, the default), xrechnung-cii, xrechnung-ubl, or peppol-bis (all XML).

Auth endpoints are throttled to 10 requests/minute per IP. Other endpoints are not separately throttled beyond normal abuse protection.

/openapi.yaml — a complete OpenAPI 3.0 document you can import into Postman, Insomnia, or any code generator.

Sie bauen auf Invonio auf?

Der Business-Tarif ergänzt alles aus Standard um die vollständige REST-API mit persönlichen Zugriffstokens — ab 29 €/Monat oder 290 €/Jahr.

Loslegen