Hoppa till innehållet
Utvecklare
English GitHub

API-referens

Kundfakturor

Kundfakturor: utkast, skapa, mejla, kreditera, betalningar och PDF.

Lista kundfakturor

GET /invoices listInvoices

Kundfakturor och kreditfakturor med rader och betalningar.

Mer i detalj (på engelska)

Customer invoices and credit invoices, drafts included, with rows and payments.

Behörighet

invoices:view

Parametrar

  • limit integer fråga

    Page size, 1–200.

    Standard: 50 · minst 1 · högst 200

  • cursor string fråga

    Opaque cursor from meta.next_cursor of the previous page.

    högst 2000 tecken

  • updated_since string (date-time) fråga

    Bara poster som ändrats efter den här tiden (ISO 8601). Listor sorteras på updated_at och id.

    Exempel: 2026-03-01T00:00:00+01:00

  • status string fråga

    DRAFT, ISSUED (unpaid), PAID or CREDITED.

    Värden: DRAFT, ISSUED, PAID, CREDITED

  • kind string fråga

    INVOICE or CREDIT.

    Värden: INVOICE, CREDIT

  • customer_id integer fråga

    Only this customer.

  • date_from string (date) fråga

    From this date (YYYY-MM-DD), inclusive.

  • date_to string (date) fråga

    Up to this date (YYYY-MM-DD), inclusive.

Svar

200 OK – A page of invoices.

application/jsonobject

  • data array<Invoice> krävs
    34 fält · varje post
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)
  • meta ListMeta krävs
    3 fält
    • limit integer krävs
    • next_cursor string krävs kan vara null

      Opaque; pass as `cursor` for the next page. null on the last page.

    • has_more boolean krävs

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl "https://nonox.app/api/v1/invoices?limit=50&updated_since=2026-03-01T00%3A00%3A00%2B01%3A00" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json"
PHP (Laravel)
use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/invoices', [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
    ]);

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/invoices', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'query' => [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const url = new URL('https://nonox.app/api/v1/invoices');
url.searchParams.set('limit', '50');
url.searchParams.set('updated_since', '2026-03-01T00:00:00+01:00');

const response = await fetch(url, {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/invoices",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    params={
        "limit": 50,
        "updated_since": "2026-03-01T00:00:00+01:00",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json
{
  "data": [
    {
      "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
      "number": 1042,
      "kind": "INVOICE",
      "status": "PAID",
      "credits_invoice_id": null,
      "customer_id": 18,
      "customer": {
        "number": 1004,
        "name": "Kund Exempel AB",
        "org_number": "559900-4560",
        "vat_number": "SE559900456001",
        "email": "faktura@kund.example.se",
        "address": {
          "line1": "Kundvägen 5",
          "line2": null,
          "postal_code": "222 33",
          "city": "Exempelby",
          "country": "SE"
        }
      },
      "invoice_date": "2026-03-02",
      "due_date": "2026-04-01",
      "delivery_date": null,
      "your_reference": "Anna Exempel",
      "our_reference": null,
      "notes": null,
      "reverse_charge": false,
      "foreign_sale": null,
      "tax_reduction": null,
      "tax_reduction_ore": 0,
      "property_designation": null,
      "currency": "SEK",
      "net_ore": 190000,
      "vat_ore": 47500,
      "rounding_ore": 0,
      "total_ore": 237500,
      "paid_ore": 237500,
      "remaining_ore": 0,
      "ocr": "104257",
      "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
      "issued_at": "2026-03-02T10:45:12+01:00",
      "sent_at": "2026-03-02T10:45:12+01:00",
      "sent_to": "faktura@kund.example.se",
      "rows": [
        {
          "article": "TIM",
          "description": "Konsulttimme",
          "quantity": "2",
          "unit": "h",
          "unit_price_ore": 95000,
          "discount_bp": 0,
          "vat_rate": 2500,
          "account": 3001,
          "net_ore": 190000,
          "labour": false
        }
      ],
      "payments": [
        {
          "id": 88,
          "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
          "paid_on": "2026-03-28",
          "amount_ore": 237500,
          "currency": "SEK",
          "account": 1930,
          "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
          "created_at": "2026-03-28T09:12:00+01:00",
          "updated_at": "2026-03-28T09:12:00+01:00"
        }
      ],
      "created_at": "2026-03-02T10:45:12+01:00",
      "updated_at": "2026-03-28T09:12:00+01:00"
    }
  ],
  "meta": {
    "limit": 50,
    "next_cursor": null,
    "has_more": false
  }
}

Fel

4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Skapa ett fakturautkast

POST /invoices createInvoice

Skapar ett utkast. Inget bokförs och inget nummer tas förrän fakturan skapas.

Mer i detalj (på engelska)

Creates a draft. Nothing is booked and no number is taken until it is issued. The due date follows the customer's payment terms unless given; totals, VAT and öresavrundning are calculated. Same Action as the app (SaveDraftInvoice).

Behörighet

invoices:create

Parametrar

  • Idempotency-Key string huvud krävs

    Krävs på varje POST. Ett unikt värde per avsedd åtgärd (helst ett UUID). Sparas i 24 timmar per nyckel eller app, så att ett nytt försök aldrig bokför två gånger.

    minst 1 tecken · högst 255 tecken · Exempel: 3f6c1b7e-2d4a-4e8b-9c0d-5a1b2c3d4e5f

Innehåll i anropet

application/jsonInvoiceInput krävs

  • customer_id integer krävs
  • invoice_date string (date) krävs
  • due_date string (date) kan vara null
  • delivery_date string (date) kan vara null
  • your_reference string kan vara null
  • our_reference string kan vara null
  • notes string kan vara null

    högst 2000 tecken

  • reverse_charge boolean kan vara null
  • foreign_sale string kan vara null
  • tax_reduction string kan vara null

    Värden: ROT, RUT

  • property_designation string kan vara null
  • rows array<InvoiceRowInput> krävs
    9 fält · varje post
    • article string kan vara null

      Article number. Its name, price and VAT rate are used for fields left out.

    • description string

      högst 255 tecken

    • quantity integer | string

      An integer, or a decimal string such as "1.5". Default 1.

      2 fält
      • Ett av integer
      • Ett av string
    • unit string

      högst 10 tecken

    • unit_price_ore integer
    • discount_bp integer

      minst 0 · högst 10000

    • vat_rate integer

      Värden: 2500, 1200, 600, 0

    • account integer kan vara null
    • labour boolean

Svar

201 Created – The draft.

application/jsonobject

  • data Invoice krävs
    34 fält
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Location, Idempotent-Replayed

400 Bad Request – Bad request: missing or invalid Idempotency-Key, or a body that is not a JSON object.

Alla felkoder · application/problem+json

  • idempotency_key_requiredNo Idempotency-Key on a POST

    Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.

  • idempotency_key_invalidIdempotency-Key too long or not visible ASCII

    Idempotency-Key ska vara 1–255 synliga ASCII-tecken.

  • invalid_jsonMalformed JSON

    Kroppen är inte giltig JSON (ett objekt).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

409 Conflict – A request with the same Idempotency-Key is still running.

Alla felkoder · application/problem+json

  • idempotency_in_progressSame key, first request not finished

    En begäran med samma Idempotency-Key pågår. Vänta och försök igen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

  • unsupported_media_typeWrong Content-Type

    Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

  • validation_failedField errors

    Uppgifterna kunde inte godtas. Se errors.

  • idempotency_key_reusedSame key, different body

    Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl -X POST "https://nonox.app/api/v1/invoices" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "customer_id": 18,
  "invoice_date": "2026-03-02",
  "your_reference": "Anna Exempel",
  "rows": [
    {
      "article": "TIM",
      "quantity": 2
    },
    {
      "description": "Resa",
      "quantity": "1.5",
      "unit_price_ore": 20000,
      "vat_rate": 2500,
      "discount_bp": 1000
    }
  ]
}'
PHP (Laravel)
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->withHeaders(['Idempotency-Key' => (string) Str::uuid()])
    ->post('https://nonox.app/api/v1/invoices', [
        'customer_id' => 18,
        'invoice_date' => '2026-03-02',
        'your_reference' => 'Anna Exempel',
        'rows' => [
            [
                'article' => 'TIM',
                'quantity' => 2,
            ],
            [
                'description' => 'Resa',
                'quantity' => '1.5',
                'unit_price_ore' => 20000,
                'vat_rate' => 2500,
                'discount_bp' => 1000,
            ],
        ],
    ]);

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('POST', 'https://nonox.app/api/v1/invoices', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => bin2hex(random_bytes(16)),
    ],
    'json' => [
        'customer_id' => 18,
        'invoice_date' => '2026-03-02',
        'your_reference' => 'Anna Exempel',
        'rows' => [
            [
                'article' => 'TIM',
                'quantity' => 2,
            ],
            [
                'description' => 'Resa',
                'quantity' => '1.5',
                'unit_price_ore' => 20000,
                'vat_rate' => 2500,
                'discount_bp' => 1000,
            ],
        ],
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "customer_id": 18,
    "invoice_date": "2026-03-02",
    "your_reference": "Anna Exempel",
    "rows": [
      {
        "article": "TIM",
        "quantity": 2
      },
      {
        "description": "Resa",
        "quantity": "1.5",
        "unit_price_ore": 20000,
        "vat_rate": 2500,
        "discount_bp": 1000
      }
    ]
  }),
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import uuid
import requests

response = requests.post(
    "https://nonox.app/api/v1/invoices",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "customer_id": 18,
        "invoice_date": "2026-03-02",
        "your_reference": "Anna Exempel",
        "rows": [
            {
                "article": "TIM",
                "quantity": 2,
            },
            {
                "description": "Resa",
                "quantity": "1.5",
                "unit_price_ore": 20000,
                "vat_rate": 2500,
                "discount_bp": 1000,
            },
        ],
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 201

application/json
{
  "data": {
    "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "number": 1042,
    "kind": "INVOICE",
    "status": "PAID",
    "credits_invoice_id": null,
    "customer_id": 18,
    "customer": {
      "number": 1004,
      "name": "Kund Exempel AB",
      "org_number": "559900-4560",
      "vat_number": "SE559900456001",
      "email": "faktura@kund.example.se",
      "address": {
        "line1": "Kundvägen 5",
        "line2": null,
        "postal_code": "222 33",
        "city": "Exempelby",
        "country": "SE"
      }
    },
    "invoice_date": "2026-03-02",
    "due_date": "2026-04-01",
    "delivery_date": null,
    "your_reference": "Anna Exempel",
    "our_reference": null,
    "notes": null,
    "reverse_charge": false,
    "foreign_sale": null,
    "tax_reduction": null,
    "tax_reduction_ore": 0,
    "property_designation": null,
    "currency": "SEK",
    "net_ore": 190000,
    "vat_ore": 47500,
    "rounding_ore": 0,
    "total_ore": 237500,
    "paid_ore": 237500,
    "remaining_ore": 0,
    "ocr": "104257",
    "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
    "issued_at": "2026-03-02T10:45:12+01:00",
    "sent_at": "2026-03-02T10:45:12+01:00",
    "sent_to": "faktura@kund.example.se",
    "rows": [
      {
        "article": "TIM",
        "description": "Konsulttimme",
        "quantity": "2",
        "unit": "h",
        "unit_price_ore": 95000,
        "discount_bp": 0,
        "vat_rate": 2500,
        "account": 3001,
        "net_ore": 190000,
        "labour": false
      }
    ],
    "payments": [
      {
        "id": 88,
        "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
        "currency": "SEK",
        "account": 1930,
        "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "created_at": "2026-03-28T09:12:00+01:00",
        "updated_at": "2026-03-28T09:12:00+01:00"
      }
    ],
    "created_at": "2026-03-02T10:45:12+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4003 exempel
No Idempotency-Key on a POST
{
  "type": "urn:nonox:problem:idempotency_key_required",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_required",
  "detail": "Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Idempotency-Key too long or not visible ASCII
{
  "type": "urn:nonox:problem:idempotency_key_invalid",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_invalid",
  "detail": "Idempotency-Key ska vara 1–255 synliga ASCII-tecken.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Malformed JSON
{
  "type": "urn:nonox:problem:invalid_json",
  "title": "Bad Request",
  "status": 400,
  "code": "invalid_json",
  "detail": "Kroppen är inte giltig JSON (ett objekt).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4091 exempel
Same key, first request not finished
{
  "type": "urn:nonox:problem:idempotency_in_progress",
  "title": "Conflict",
  "status": 409,
  "code": "idempotency_in_progress",
  "detail": "En begäran med samma Idempotency-Key pågår. Vänta och försök igen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4151 exempel
Wrong Content-Type
{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4222 exempel
Field errors
{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}
Same key, different body
{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Hämta en kundfaktura

GET /invoices/{invoice} getInvoice

En faktura med rader och betalningar.

Mer i detalj (på engelska)

One invoice with rows and payments. Never a personal number.

Behörighet

invoices:view

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

Svar

200 OK – The invoice.

application/jsonobject

  • data Invoice krävs
    34 fält
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json"
PHP (Laravel)
use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54');

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54', {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json
{
  "data": {
    "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "number": 1042,
    "kind": "INVOICE",
    "status": "PAID",
    "credits_invoice_id": null,
    "customer_id": 18,
    "customer": {
      "number": 1004,
      "name": "Kund Exempel AB",
      "org_number": "559900-4560",
      "vat_number": "SE559900456001",
      "email": "faktura@kund.example.se",
      "address": {
        "line1": "Kundvägen 5",
        "line2": null,
        "postal_code": "222 33",
        "city": "Exempelby",
        "country": "SE"
      }
    },
    "invoice_date": "2026-03-02",
    "due_date": "2026-04-01",
    "delivery_date": null,
    "your_reference": "Anna Exempel",
    "our_reference": null,
    "notes": null,
    "reverse_charge": false,
    "foreign_sale": null,
    "tax_reduction": null,
    "tax_reduction_ore": 0,
    "property_designation": null,
    "currency": "SEK",
    "net_ore": 190000,
    "vat_ore": 47500,
    "rounding_ore": 0,
    "total_ore": 237500,
    "paid_ore": 237500,
    "remaining_ore": 0,
    "ocr": "104257",
    "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
    "issued_at": "2026-03-02T10:45:12+01:00",
    "sent_at": "2026-03-02T10:45:12+01:00",
    "sent_to": "faktura@kund.example.se",
    "rows": [
      {
        "article": "TIM",
        "description": "Konsulttimme",
        "quantity": "2",
        "unit": "h",
        "unit_price_ore": 95000,
        "discount_bp": 0,
        "vat_rate": 2500,
        "account": 3001,
        "net_ore": 190000,
        "labour": false
      }
    ],
    "payments": [
      {
        "id": 88,
        "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
        "currency": "SEK",
        "account": 1930,
        "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "created_at": "2026-03-28T09:12:00+01:00",
        "updated_at": "2026-03-28T09:12:00+01:00"
      }
    ],
    "created_at": "2026-03-02T10:45:12+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Ändra ett fakturautkast

PATCH /invoices/{invoice} updateInvoice

Ändrar ett utkast. En skapad faktura ändras aldrig.

Mer i detalj (på engelska)

Changes a draft; an issued invoice answers 403 and never changes.

Behörighet

invoices:create

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

Innehåll i anropet

application/jsonInvoicePatch krävs

Only the fields sent are changed; `rows`, when sent, replaces all rows.

  • customer_id integer
  • invoice_date string (date)
  • due_date string (date) kan vara null
  • delivery_date string (date) kan vara null
  • your_reference string kan vara null
  • our_reference string kan vara null
  • notes string kan vara null

    högst 2000 tecken

  • reverse_charge boolean kan vara null
  • foreign_sale string kan vara null
  • tax_reduction string kan vara null

    Värden: ROT, RUT

  • property_designation string kan vara null
  • rows array<InvoiceRowInput>
    9 fält · varje post
    • article string kan vara null

      Article number. Its name, price and VAT rate are used for fields left out.

    • description string

      högst 255 tecken

    • quantity integer | string

      An integer, or a decimal string such as "1.5". Default 1.

      2 fält
      • Ett av integer
      • Ett av string
    • unit string

      högst 10 tecken

    • unit_price_ore integer
    • discount_bp integer

      minst 0 · högst 10000

    • vat_rate integer

      Värden: 2500, 1200, 600, 0

    • account integer kan vara null
    • labour boolean

Svar

200 OK – The draft.

application/jsonobject

  • data Invoice krävs
    34 fält
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

  • unsupported_media_typeWrong Content-Type

    Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

  • validation_failedField errors

    Uppgifterna kunde inte godtas. Se errors.

  • idempotency_key_reusedSame key, different body

    Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl -X PATCH "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
  "your_reference": "Anna Exempel"
}'
PHP (Laravel)
use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->patch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54', [
        'your_reference' => 'Anna Exempel',
    ]);

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('PATCH', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'json' => [
        'your_reference' => 'Anna Exempel',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54', {
  method: 'PATCH',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "your_reference": "Anna Exempel"
  }),
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import requests

response = requests.patch(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    json={
        "your_reference": "Anna Exempel",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json
{
  "data": {
    "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "number": 1042,
    "kind": "INVOICE",
    "status": "PAID",
    "credits_invoice_id": null,
    "customer_id": 18,
    "customer": {
      "number": 1004,
      "name": "Kund Exempel AB",
      "org_number": "559900-4560",
      "vat_number": "SE559900456001",
      "email": "faktura@kund.example.se",
      "address": {
        "line1": "Kundvägen 5",
        "line2": null,
        "postal_code": "222 33",
        "city": "Exempelby",
        "country": "SE"
      }
    },
    "invoice_date": "2026-03-02",
    "due_date": "2026-04-01",
    "delivery_date": null,
    "your_reference": "Anna Exempel",
    "our_reference": null,
    "notes": null,
    "reverse_charge": false,
    "foreign_sale": null,
    "tax_reduction": null,
    "tax_reduction_ore": 0,
    "property_designation": null,
    "currency": "SEK",
    "net_ore": 190000,
    "vat_ore": 47500,
    "rounding_ore": 0,
    "total_ore": 237500,
    "paid_ore": 237500,
    "remaining_ore": 0,
    "ocr": "104257",
    "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
    "issued_at": "2026-03-02T10:45:12+01:00",
    "sent_at": "2026-03-02T10:45:12+01:00",
    "sent_to": "faktura@kund.example.se",
    "rows": [
      {
        "article": "TIM",
        "description": "Konsulttimme",
        "quantity": "2",
        "unit": "h",
        "unit_price_ore": 95000,
        "discount_bp": 0,
        "vat_rate": 2500,
        "account": 3001,
        "net_ore": 190000,
        "labour": false
      }
    ],
    "payments": [
      {
        "id": 88,
        "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
        "currency": "SEK",
        "account": 1930,
        "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "created_at": "2026-03-28T09:12:00+01:00",
        "updated_at": "2026-03-28T09:12:00+01:00"
      }
    ],
    "created_at": "2026-03-02T10:45:12+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4151 exempel
Wrong Content-Type
{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4222 exempel
Field errors
{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}
Same key, different body
{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Skapa (bokför) fakturan

POST /invoices/{invoice}/issue issueInvoice

Ger utkastet nummer och OCR och bokför det i serie B. Går inte att ångra, bara kreditera. Bokför en verifikation, så nyckeln eller appen behöver även vouchers:create och vouchers:post.

Mer i detalj (på engelska)

Makes the draft an invoice: the next gapless invoice number, an OCR reference, the customer frozen, and under fakturametoden a voucher in series B. Irreversible; a mistake is credited. Does not e-mail it (see /send). Books a voucher as the person behind the credential, so the credential also needs vouchers:create and vouchers:post. Same Action as the app (IssueInvoice).

Behörighet

invoices:send + vouchers:create + vouchers:post

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

  • Idempotency-Key string huvud krävs

    Krävs på varje POST. Ett unikt värde per avsedd åtgärd (helst ett UUID). Sparas i 24 timmar per nyckel eller app, så att ett nytt försök aldrig bokför två gånger.

    minst 1 tecken · högst 255 tecken · Exempel: 3f6c1b7e-2d4a-4e8b-9c0d-5a1b2c3d4e5f

Svar

200 OK – The issued invoice.

application/jsonobject

  • data Invoice krävs
    34 fält
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Idempotent-Replayed

400 Bad Request – Bad request: missing or invalid Idempotency-Key, or a body that is not a JSON object.

Alla felkoder · application/problem+json

  • idempotency_key_requiredNo Idempotency-Key on a POST

    Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.

  • idempotency_key_invalidIdempotency-Key too long or not visible ASCII

    Idempotency-Key ska vara 1–255 synliga ASCII-tecken.

  • invalid_jsonMalformed JSON

    Kroppen är inte giltig JSON (ett objekt).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

409 Conflict – A request with the same Idempotency-Key is still running.

Alla felkoder · application/problem+json

  • idempotency_in_progressSame key, first request not finished

    En begäran med samma Idempotency-Key pågår. Vänta och försök igen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

  • unsupported_media_typeWrong Content-Type

    Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

  • validation_failedField errors

    Uppgifterna kunde inte godtas. Se errors.

  • idempotency_key_reusedSame key, different body

    Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl -X POST "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/issue" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)"
PHP (Laravel)
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->withHeaders(['Idempotency-Key' => (string) Str::uuid()])
    ->post('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/issue');

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('POST', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/issue', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => bin2hex(random_bytes(16)),
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/issue', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import uuid
import requests

response = requests.post(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/issue",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json
{
  "data": {
    "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "number": 1042,
    "kind": "INVOICE",
    "status": "PAID",
    "credits_invoice_id": null,
    "customer_id": 18,
    "customer": {
      "number": 1004,
      "name": "Kund Exempel AB",
      "org_number": "559900-4560",
      "vat_number": "SE559900456001",
      "email": "faktura@kund.example.se",
      "address": {
        "line1": "Kundvägen 5",
        "line2": null,
        "postal_code": "222 33",
        "city": "Exempelby",
        "country": "SE"
      }
    },
    "invoice_date": "2026-03-02",
    "due_date": "2026-04-01",
    "delivery_date": null,
    "your_reference": "Anna Exempel",
    "our_reference": null,
    "notes": null,
    "reverse_charge": false,
    "foreign_sale": null,
    "tax_reduction": null,
    "tax_reduction_ore": 0,
    "property_designation": null,
    "currency": "SEK",
    "net_ore": 190000,
    "vat_ore": 47500,
    "rounding_ore": 0,
    "total_ore": 237500,
    "paid_ore": 237500,
    "remaining_ore": 0,
    "ocr": "104257",
    "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
    "issued_at": "2026-03-02T10:45:12+01:00",
    "sent_at": "2026-03-02T10:45:12+01:00",
    "sent_to": "faktura@kund.example.se",
    "rows": [
      {
        "article": "TIM",
        "description": "Konsulttimme",
        "quantity": "2",
        "unit": "h",
        "unit_price_ore": 95000,
        "discount_bp": 0,
        "vat_rate": 2500,
        "account": 3001,
        "net_ore": 190000,
        "labour": false
      }
    ],
    "payments": [
      {
        "id": 88,
        "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
        "currency": "SEK",
        "account": 1930,
        "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "created_at": "2026-03-28T09:12:00+01:00",
        "updated_at": "2026-03-28T09:12:00+01:00"
      }
    ],
    "created_at": "2026-03-02T10:45:12+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4003 exempel
No Idempotency-Key on a POST
{
  "type": "urn:nonox:problem:idempotency_key_required",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_required",
  "detail": "Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Idempotency-Key too long or not visible ASCII
{
  "type": "urn:nonox:problem:idempotency_key_invalid",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_invalid",
  "detail": "Idempotency-Key ska vara 1–255 synliga ASCII-tecken.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Malformed JSON
{
  "type": "urn:nonox:problem:invalid_json",
  "title": "Bad Request",
  "status": 400,
  "code": "invalid_json",
  "detail": "Kroppen är inte giltig JSON (ett objekt).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4091 exempel
Same key, first request not finished
{
  "type": "urn:nonox:problem:idempotency_in_progress",
  "title": "Conflict",
  "status": 409,
  "code": "idempotency_in_progress",
  "detail": "En begäran med samma Idempotency-Key pågår. Vänta och försök igen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4151 exempel
Wrong Content-Type
{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4222 exempel
Field errors
{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}
Same key, different body
{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Mejla fakturan

POST /invoices/{invoice}/send sendInvoice

Mejlar den skapade fakturan som PDF till kunden.

Mer i detalj (på engelska)

E-mails the issued invoice as a PDF to `email` or to the customer's address, and fires invoice.sent. A test company never e-mails anything. Same Action as the app (SendInvoice).

Behörighet

invoices:send

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

  • Idempotency-Key string huvud krävs

    Krävs på varje POST. Ett unikt värde per avsedd åtgärd (helst ett UUID). Sparas i 24 timmar per nyckel eller app, så att ett nytt försök aldrig bokför två gånger.

    minst 1 tecken · högst 255 tecken · Exempel: 3f6c1b7e-2d4a-4e8b-9c0d-5a1b2c3d4e5f

Innehåll i anropet

application/jsonSendInvoiceInput

  • email string (email) kan vara null

    Default: the customer's e-mail on the invoice.

Svar

200 OK – The invoice, with sent_at and sent_to.

application/jsonobject

  • data Invoice krävs
    34 fält
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Idempotent-Replayed

400 Bad Request – Bad request: missing or invalid Idempotency-Key, or a body that is not a JSON object.

Alla felkoder · application/problem+json

  • idempotency_key_requiredNo Idempotency-Key on a POST

    Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.

  • idempotency_key_invalidIdempotency-Key too long or not visible ASCII

    Idempotency-Key ska vara 1–255 synliga ASCII-tecken.

  • invalid_jsonMalformed JSON

    Kroppen är inte giltig JSON (ett objekt).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

409 Conflict – A request with the same Idempotency-Key is still running.

Alla felkoder · application/problem+json

  • idempotency_in_progressSame key, first request not finished

    En begäran med samma Idempotency-Key pågår. Vänta och försök igen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

  • unsupported_media_typeWrong Content-Type

    Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

  • validation_failedField errors

    Uppgifterna kunde inte godtas. Se errors.

  • idempotency_key_reusedSame key, different body

    Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl -X POST "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/send" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "faktura@kund.example.se"
}'
PHP (Laravel)
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->withHeaders(['Idempotency-Key' => (string) Str::uuid()])
    ->post('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/send', [
        'email' => 'faktura@kund.example.se',
    ]);

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('POST', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/send', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => bin2hex(random_bytes(16)),
    ],
    'json' => [
        'email' => 'faktura@kund.example.se',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/send', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "email": "faktura@kund.example.se"
  }),
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import uuid
import requests

response = requests.post(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/send",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "email": "faktura@kund.example.se",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json
{
  "data": {
    "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "number": 1042,
    "kind": "INVOICE",
    "status": "PAID",
    "credits_invoice_id": null,
    "customer_id": 18,
    "customer": {
      "number": 1004,
      "name": "Kund Exempel AB",
      "org_number": "559900-4560",
      "vat_number": "SE559900456001",
      "email": "faktura@kund.example.se",
      "address": {
        "line1": "Kundvägen 5",
        "line2": null,
        "postal_code": "222 33",
        "city": "Exempelby",
        "country": "SE"
      }
    },
    "invoice_date": "2026-03-02",
    "due_date": "2026-04-01",
    "delivery_date": null,
    "your_reference": "Anna Exempel",
    "our_reference": null,
    "notes": null,
    "reverse_charge": false,
    "foreign_sale": null,
    "tax_reduction": null,
    "tax_reduction_ore": 0,
    "property_designation": null,
    "currency": "SEK",
    "net_ore": 190000,
    "vat_ore": 47500,
    "rounding_ore": 0,
    "total_ore": 237500,
    "paid_ore": 237500,
    "remaining_ore": 0,
    "ocr": "104257",
    "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
    "issued_at": "2026-03-02T10:45:12+01:00",
    "sent_at": "2026-03-02T10:45:12+01:00",
    "sent_to": "faktura@kund.example.se",
    "rows": [
      {
        "article": "TIM",
        "description": "Konsulttimme",
        "quantity": "2",
        "unit": "h",
        "unit_price_ore": 95000,
        "discount_bp": 0,
        "vat_rate": 2500,
        "account": 3001,
        "net_ore": 190000,
        "labour": false
      }
    ],
    "payments": [
      {
        "id": 88,
        "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
        "currency": "SEK",
        "account": 1930,
        "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "created_at": "2026-03-28T09:12:00+01:00",
        "updated_at": "2026-03-28T09:12:00+01:00"
      }
    ],
    "created_at": "2026-03-02T10:45:12+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4003 exempel
No Idempotency-Key on a POST
{
  "type": "urn:nonox:problem:idempotency_key_required",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_required",
  "detail": "Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Idempotency-Key too long or not visible ASCII
{
  "type": "urn:nonox:problem:idempotency_key_invalid",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_invalid",
  "detail": "Idempotency-Key ska vara 1–255 synliga ASCII-tecken.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Malformed JSON
{
  "type": "urn:nonox:problem:invalid_json",
  "title": "Bad Request",
  "status": 400,
  "code": "invalid_json",
  "detail": "Kroppen är inte giltig JSON (ett objekt).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4091 exempel
Same key, first request not finished
{
  "type": "urn:nonox:problem:idempotency_in_progress",
  "title": "Conflict",
  "status": 409,
  "code": "idempotency_in_progress",
  "detail": "En begäran med samma Idempotency-Key pågår. Vänta och försök igen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4151 exempel
Wrong Content-Type
{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4222 exempel
Field errors
{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}
Same key, different body
{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Kreditera en faktura

POST /invoices/{invoice}/credit creditInvoice

Skapar ett utkast till kreditfaktura för hela den obetalda fakturan; den gäller när den skapas.

Mer i detalj (på engelska)

Creates a draft credit invoice for the whole of an unpaid invoice, with the same rows and negative quantities. It takes effect when issued with /issue, which closes both. Same Action as the app (CreditInvoice).

Behörighet

invoices:credit

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

  • Idempotency-Key string huvud krävs

    Krävs på varje POST. Ett unikt värde per avsedd åtgärd (helst ett UUID). Sparas i 24 timmar per nyckel eller app, så att ett nytt försök aldrig bokför två gånger.

    minst 1 tecken · högst 255 tecken · Exempel: 3f6c1b7e-2d4a-4e8b-9c0d-5a1b2c3d4e5f

Svar

201 Created – The credit invoice draft.

application/jsonobject

  • data Invoice krävs
    34 fält
    • id string (uuid)
    • number integer kan vara null

      Gapless invoice number, null while a draft.

    • kind string

      Värden: INVOICE, CREDIT

    • status string

      Open enum.

      Värden: DRAFT, ISSUED, PAID, CREDITED

    • credits_invoice_id string (uuid) kan vara null
    • customer_id integer
    • customer object

      The customer as on the invoice (frozen when issued). Never a personal number.

      6 fält
      • number integer kan vara null
      • name string kan vara null
      • org_number string kan vara null
      • vat_number string kan vara null
      • email string kan vara null
      • address object
        5 fält
        • line1 string kan vara null
        • line2 string kan vara null
        • postal_code string kan vara null
        • city string kan vara null
        • country string kan vara null
    • invoice_date string (date)
    • due_date string (date)
    • delivery_date string (date) kan vara null
    • your_reference string kan vara null
    • our_reference string kan vara null
    • notes string kan vara null
    • reverse_charge boolean
    • foreign_sale string kan vara null
    • tax_reduction string kan vara null

      ROT or RUT.

    • tax_reduction_ore integer
    • property_designation string kan vara null
    • currency string
    • net_ore integer
    • vat_ore integer
    • rounding_ore integer

      Öresavrundning to whole kronor.

    • total_ore integer
    • paid_ore integer
    • remaining_ore integer
    • ocr string kan vara null
    • voucher_id string (uuid) kan vara null
    • issued_at string (date-time) kan vara null
    • sent_at string (date-time) kan vara null
    • sent_to string kan vara null
    • rows array<InvoiceRow>
      10 fält · varje post
      • article string kan vara null
      • description string
      • quantity string

        Decimal string, up to three decimals; negative on credit invoices.

      • unit string
      • unit_price_ore integer
      • discount_bp integer

        Discount in basis points (1000 is 10 %).

      • vat_rate integer
      • account integer kan vara null
      • net_ore integer
      • labour boolean

        Labour cost (ROT/RUT).

    • payments array<InvoicePayment>
      9 fält · varje post
      • id integer
      • invoice_id string (uuid)
      • paid_on string (date)
      • amount_ore integer
      • currency string
      • account integer kan vara null

        Bank account the money came in on.

      • voucher_id string (uuid)
      • created_at string (date-time)
      • updated_at string (date-time)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Location, Idempotent-Replayed

400 Bad Request – Bad request: missing or invalid Idempotency-Key, or a body that is not a JSON object.

Alla felkoder · application/problem+json

  • idempotency_key_requiredNo Idempotency-Key on a POST

    Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.

  • idempotency_key_invalidIdempotency-Key too long or not visible ASCII

    Idempotency-Key ska vara 1–255 synliga ASCII-tecken.

  • invalid_jsonMalformed JSON

    Kroppen är inte giltig JSON (ett objekt).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

409 Conflict – A request with the same Idempotency-Key is still running.

Alla felkoder · application/problem+json

  • idempotency_in_progressSame key, first request not finished

    En begäran med samma Idempotency-Key pågår. Vänta och försök igen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

  • unsupported_media_typeWrong Content-Type

    Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

  • validation_failedField errors

    Uppgifterna kunde inte godtas. Se errors.

  • idempotency_key_reusedSame key, different body

    Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl -X POST "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/credit" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)"
PHP (Laravel)
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->withHeaders(['Idempotency-Key' => (string) Str::uuid()])
    ->post('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/credit');

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('POST', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/credit', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => bin2hex(random_bytes(16)),
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/credit', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import uuid
import requests

response = requests.post(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/credit",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 201

application/json
{
  "data": {
    "id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "number": 1042,
    "kind": "INVOICE",
    "status": "PAID",
    "credits_invoice_id": null,
    "customer_id": 18,
    "customer": {
      "number": 1004,
      "name": "Kund Exempel AB",
      "org_number": "559900-4560",
      "vat_number": "SE559900456001",
      "email": "faktura@kund.example.se",
      "address": {
        "line1": "Kundvägen 5",
        "line2": null,
        "postal_code": "222 33",
        "city": "Exempelby",
        "country": "SE"
      }
    },
    "invoice_date": "2026-03-02",
    "due_date": "2026-04-01",
    "delivery_date": null,
    "your_reference": "Anna Exempel",
    "our_reference": null,
    "notes": null,
    "reverse_charge": false,
    "foreign_sale": null,
    "tax_reduction": null,
    "tax_reduction_ore": 0,
    "property_designation": null,
    "currency": "SEK",
    "net_ore": 190000,
    "vat_ore": 47500,
    "rounding_ore": 0,
    "total_ore": 237500,
    "paid_ore": 237500,
    "remaining_ore": 0,
    "ocr": "104257",
    "voucher_id": "1d2e3f4a-5b6c-4d7e-8f9a-0b1c2d3e4f5a",
    "issued_at": "2026-03-02T10:45:12+01:00",
    "sent_at": "2026-03-02T10:45:12+01:00",
    "sent_to": "faktura@kund.example.se",
    "rows": [
      {
        "article": "TIM",
        "description": "Konsulttimme",
        "quantity": "2",
        "unit": "h",
        "unit_price_ore": 95000,
        "discount_bp": 0,
        "vat_rate": 2500,
        "account": 3001,
        "net_ore": 190000,
        "labour": false
      }
    ],
    "payments": [
      {
        "id": 88,
        "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
        "currency": "SEK",
        "account": 1930,
        "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "created_at": "2026-03-28T09:12:00+01:00",
        "updated_at": "2026-03-28T09:12:00+01:00"
      }
    ],
    "created_at": "2026-03-02T10:45:12+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4003 exempel
No Idempotency-Key on a POST
{
  "type": "urn:nonox:problem:idempotency_key_required",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_required",
  "detail": "Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Idempotency-Key too long or not visible ASCII
{
  "type": "urn:nonox:problem:idempotency_key_invalid",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_invalid",
  "detail": "Idempotency-Key ska vara 1–255 synliga ASCII-tecken.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Malformed JSON
{
  "type": "urn:nonox:problem:invalid_json",
  "title": "Bad Request",
  "status": 400,
  "code": "invalid_json",
  "detail": "Kroppen är inte giltig JSON (ett objekt).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4091 exempel
Same key, first request not finished
{
  "type": "urn:nonox:problem:idempotency_in_progress",
  "title": "Conflict",
  "status": 409,
  "code": "idempotency_in_progress",
  "detail": "En begäran med samma Idempotency-Key pågår. Vänta och försök igen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4151 exempel
Wrong Content-Type
{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4222 exempel
Field errors
{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}
Same key, different body
{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Registrera en inbetalning

POST /invoices/{invoice}/payments registerInvoicePayment

Registrerar en inbetalning som bokförs i serie C. Bokför en verifikation, så nyckeln eller appen behöver även vouchers:create och vouchers:post.

Mer i detalj (på engelska)

Registers money received, booked in series C; the invoice is PAID when nothing remains (and invoice.paid is sent). More than what remains answers 422. Books a voucher as the person behind the credential, so the credential also needs vouchers:create and vouchers:post. Same Action as the app (RegisterPayment).

Behörighet

payments:create + vouchers:create + vouchers:post

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

  • Idempotency-Key string huvud krävs

    Krävs på varje POST. Ett unikt värde per avsedd åtgärd (helst ett UUID). Sparas i 24 timmar per nyckel eller app, så att ett nytt försök aldrig bokför två gånger.

    minst 1 tecken · högst 255 tecken · Exempel: 3f6c1b7e-2d4a-4e8b-9c0d-5a1b2c3d4e5f

Innehåll i anropet

application/jsonPaymentInput krävs

  • paid_on string (date) krävs
  • amount_ore integer krävs

    minst 1

  • account integer kan vara null

    Bank account; default 1930.

    minst 1900 · högst 1999

Svar

201 Created – The payment.

application/jsonobject

  • data InvoicePayment krävs
    9 fält
    • id integer
    • invoice_id string (uuid)
    • paid_on string (date)
    • amount_ore integer
    • currency string
    • account integer kan vara null

      Bank account the money came in on.

    • voucher_id string (uuid)
    • created_at string (date-time)
    • updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Location, Idempotent-Replayed

400 Bad Request – Bad request: missing or invalid Idempotency-Key, or a body that is not a JSON object.

Alla felkoder · application/problem+json

  • idempotency_key_requiredNo Idempotency-Key on a POST

    Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.

  • idempotency_key_invalidIdempotency-Key too long or not visible ASCII

    Idempotency-Key ska vara 1–255 synliga ASCII-tecken.

  • invalid_jsonMalformed JSON

    Kroppen är inte giltig JSON (ett objekt).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

409 Conflict – A request with the same Idempotency-Key is still running.

Alla felkoder · application/problem+json

  • idempotency_in_progressSame key, first request not finished

    En begäran med samma Idempotency-Key pågår. Vänta och försök igen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

  • unsupported_media_typeWrong Content-Type

    Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

  • validation_failedField errors

    Uppgifterna kunde inte godtas. Se errors.

  • idempotency_key_reusedSame key, different body

    Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl -X POST "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/payments" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "paid_on": "2026-03-28",
  "amount_ore": 237500
}'
PHP (Laravel)
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->withHeaders(['Idempotency-Key' => (string) Str::uuid()])
    ->post('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/payments', [
        'paid_on' => '2026-03-28',
        'amount_ore' => 237500,
    ]);

$response->throw();

$data = $response->json('data');
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('POST', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/payments', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => bin2hex(random_bytes(16)),
    ],
    'json' => [
        'paid_on' => '2026-03-28',
        'amount_ore' => 237500,
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/payments', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "paid_on": "2026-03-28",
    "amount_ore": 237500
  }),
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();
Python
import os
import uuid
import requests

response = requests.post(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/payments",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "paid_on": "2026-03-28",
        "amount_ore": 237500,
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 201

application/json
{
  "data": {
    "id": 88,
    "invoice_id": "5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54",
    "paid_on": "2026-03-28",
    "amount_ore": 237500,
    "currency": "SEK",
    "account": 1930,
    "voucher_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    "created_at": "2026-03-28T09:12:00+01:00",
    "updated_at": "2026-03-28T09:12:00+01:00"
  }
}

Fel

4003 exempel
No Idempotency-Key on a POST
{
  "type": "urn:nonox:problem:idempotency_key_required",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_required",
  "detail": "Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Idempotency-Key too long or not visible ASCII
{
  "type": "urn:nonox:problem:idempotency_key_invalid",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_invalid",
  "detail": "Idempotency-Key ska vara 1–255 synliga ASCII-tecken.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Malformed JSON
{
  "type": "urn:nonox:problem:invalid_json",
  "title": "Bad Request",
  "status": 400,
  "code": "invalid_json",
  "detail": "Kroppen är inte giltig JSON (ett objekt).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4091 exempel
Same key, first request not finished
{
  "type": "urn:nonox:problem:idempotency_in_progress",
  "title": "Conflict",
  "status": 409,
  "code": "idempotency_in_progress",
  "detail": "En begäran med samma Idempotency-Key pågår. Vänta och försök igen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4151 exempel
Wrong Content-Type
{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4222 exempel
Field errors
{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}
Same key, different body
{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Hämta fakturan som PDF

GET /invoices/{invoice}/pdf getInvoicePdf

Fakturan som PDF.

Mer i detalj (på engelska)

The invoice in NONOX's own layout, as a PDF (a draft is marked as one). Counts toward the company's hourly PDF quota; above it 429.

Behörighet

invoices:view

Parametrar

  • invoice string (uuid) sökväg krävs

    Invoice id (UUID, not the invoice number).

    Exempel: 5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54

Svar

200 OK – The PDF.

application/pdfstring

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

  • unauthenticatedNo valid credential

    Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

  • insufficient_scopeScope missing or permission lost

    Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.

  • forbiddenThe action refuses (for example changing a posted voucher)

    Behörighet saknas för det här.

  • ip_not_allowedOutside the IP allowlist

    Företaget tillåter inte anrop från den här adressen.

  • company_archivedWrite to an archived company

    Företaget är arkiverat och kan bara läsas.

  • app_not_allowedThe company no longer allows the app

    Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

  • not_foundUnknown id, other company's id, or module off

    Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

  • rate_limitedOver the limit

    För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl
curl "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/pdf" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -o kvitto.pdf
PHP (Laravel)
use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/pdf');

$response->throw();

file_put_contents('kvitto.pdf', $response->body());
PHP (Guzzle)
$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/pdf', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'sink' => 'kvitto.pdf',
]);
JavaScript
const response = await fetch('https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/pdf', {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const file = Buffer.from(await response.arrayBuffer());
Python
import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/invoices/5c2e8a41-7b3d-4f19-a6c2-0e9d8b7a6f54/pdf",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    timeout=30,
)
response.raise_for_status()

with open("kvitto.pdf", "wb") as file:
    file.write(response.content)

Fel

4011 exempel
No valid credential
{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4035 exempel
Scope missing or permission lost
{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}
The action refuses (for example changing a posted voucher)
{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Outside the IP allowlist
{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
Write to an archived company
{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
The company no longer allows the app
{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4041 exempel
Unknown id, other company's id, or module off
{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}
4291 exempel
Over the limit
{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}