Lager

Lagret: lagerförda artiklar med saldo per plats, lagerställen, saldon och inleveranser.

Lista lagerförda artiklar med saldo

GET /inventory/articles listInventoryArticles

Lagerförda artiklar med saldo totalt och per lagerställe.

Mer i detalj (på engelska)

The articles kept in stock (Lager), with the total and the quantity per location. Quantities are decimal strings with up to three decimals. purchase_price_ore is null unless the person behind the credential may manage the stock (inventory:manage). Filter on a barcode with gtin or on the article number with number. Needs inventory:view, which no one has while the module is off.

Behörighet

inventory:view

Parametrar

limit integer fråga

Page size, 1–200.

Standard: 50 · minst 1 · högst 200
cursor string fråga

Opaque cursor from meta.next_cursor of the previous page.

högst 2000 tecken
updated_since string (date-time) fråga

Bara poster som ändrats efter den här tiden (ISO 8601). Listor sorteras på updated_at och id.

Exempel: 2026-03-01T00:00:00+01:00
gtin string fråga

Only the article with this EAN/GTIN.

Exempel: 7310865004703
number string fråga

Only the article with this article number.

Exempel: V-1

Svar

200 OK – A page of results.

application/jsonobject

data array<InventoryArticle> krävs
19 fält · varje post
- id integer
- number string
- name string
- unit string
- sku string kan vara null
- gtin string kan vara null
  
  EAN/GTIN with a valid check digit.
- scanner_code string kan vara null
- brand string kan vara null
- model string kan vara null
- price_ore integer
  
  Sales price excluding VAT, whole öre.
- purchase_price_ore integer kan vara null
  
  Purchase price, whole öre; null without inventory:manage.
- vat_rate integer
- vat_treatment string
  
  Värden: STANDARD, VMB
- is_active boolean
- default_location_id integer kan vara null
- reorder_point string kan vara null
- stock object
  2 fält
  - quantity string
  - locations array<object>
    
    3 fält · varje post
    
    location_id integer
    
    code string
    
    quantity string
- images array<object>
  
  The pictures in order; the first is the main picture. Fetch one from url with the same token.
  4 fält · varje post
  - id integer
  - position integer
  - alt string kan vara null
  - url string (uri)
- updated_at string (date-time)
meta ListMeta krävs
3 fält
- limit integer krävs
- next_cursor string krävs kan vara null
  
  Opaque; pass as `cursor` for the next page. null on the last page.
- has_more boolean krävs

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

unauthenticatedNo valid credential

Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

403 Forbidden – The credential may not do this: a scope is missing, the granting person no longer has the permission, the address is not allowed, the company is archived (read-only) or no longer allows the app.

Alla felkoder · application/problem+json

insufficient_scopeScope missing or permission lost

Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.
forbiddenThe action refuses (for example changing a posted voucher)

Behörighet saknas för det här.
ip_not_allowedOutside the IP allowlist

Företaget tillåter inte anrop från den här adressen.
company_archivedWrite to an archived company

Företaget är arkiverat och kan bara läsas.
app_not_allowedThe company no longer allows the app

Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

rate_limitedOver the limit

För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl

curl "https://nonox.app/api/v1/inventory/articles?limit=50&updated_since=2026-03-01T00%3A00%3A00%2B01%3A00&gtin=7310865004703&number=V-1" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json"

PHP (Laravel)

use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/inventory/articles', [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
        'gtin' => 7310865004703,
        'number' => 'V-1',
    ]);

$response->throw();

$data = $response->json('data');

PHP (Guzzle)

$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/inventory/articles', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'query' => [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
        'gtin' => 7310865004703,
        'number' => 'V-1',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];

JavaScript

const url = new URL('https://nonox.app/api/v1/inventory/articles');
url.searchParams.set('limit', '50');
url.searchParams.set('updated_since', '2026-03-01T00:00:00+01:00');
url.searchParams.set('gtin', '7310865004703');
url.searchParams.set('number', 'V-1');

const response = await fetch(url, {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();

Python

import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/inventory/articles",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    params={
        "limit": 50,
        "updated_since": "2026-03-01T00:00:00+01:00",
        "gtin": 7310865004703,
        "number": "V-1",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json

{
  "data": [
    {
      "id": 12,
      "number": "V-1",
      "name": "Kaffekopp",
      "unit": "st",
      "sku": "KOPP-VIT",
      "gtin": "7310865004703",
      "scanner_code": null,
      "brand": "Nordvik",
      "model": null,
      "price_ore": 19900,
      "purchase_price_ore": 8000,
      "vat_rate": 2500,
      "vat_treatment": "STANDARD",
      "is_active": true,
      "default_location_id": 4,
      "reorder_point": "5",
      "stock": {
        "quantity": "12",
        "locations": [
          {
            "location_id": 4,
            "code": "HL-A-01",
            "quantity": "10"
          },
          {
            "location_id": 5,
            "code": "HL-A-02",
            "quantity": "2"
          }
        ]
      },
      "images": [
        {
          "id": 31,
          "position": 0,
          "alt": "Framsidan",
          "url": "https://nonox.app/api/v1/inventory/articles/12/images/31/content"
        }
      ],
      "updated_at": "2026-11-02T09:00:00+01:00"
    }
  ],
  "meta": {
    "limit": 50,
    "next_cursor": null,
    "has_more": false
  }
}

Fel

4011 exempel

No valid credential

{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4035 exempel

Scope missing or permission lost

{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}

The action refuses (for example changing a posted voucher)

{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Outside the IP allowlist

{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Write to an archived company

{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

The company no longer allows the app

{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4291 exempel

Over the limit

{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Hämta en artikelbild

GET /inventory/articles/{article}/images/{image}/content downloadInventoryArticleImage

En bild på en artikel som JPEG. Fältet url i artikelns bildlista pekar hit.

Mer i detalj (på engelska)

One picture of an article as a JPEG (at most 1600 pixels on the longest side). The url field in the images list of an article points here. Needs inventory:view.

Behörighet

inventory:view

Parametrar

article integer sökväg krävs

Article id.

Exempel: 12
image integer sökväg krävs

Picture id.

Exempel: 31

Svar

200 OK – The picture.

image/jpegstring

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

unauthenticatedNo valid credential

Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

Alla felkoder · application/problem+json

insufficient_scopeScope missing or permission lost

Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.
forbiddenThe action refuses (for example changing a posted voucher)

Behörighet saknas för det här.
ip_not_allowedOutside the IP allowlist

Företaget tillåter inte anrop från den här adressen.
company_archivedWrite to an archived company

Företaget är arkiverat och kan bara läsas.
app_not_allowedThe company no longer allows the app

Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

404 Not Found – Not found. Also the answer for another company's ids (existence is never revealed) and for every call while NONOX Connect is turned off for the company.

Alla felkoder · application/problem+json

not_foundUnknown id, other company's id, or module off

Det du söker finns inte.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

rate_limitedOver the limit

För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl

curl "https://nonox.app/api/v1/inventory/articles/12/images/31/content" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -o kvitto.pdf

PHP (Laravel)

use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/inventory/articles/12/images/31/content');

$response->throw();

file_put_contents('kvitto.pdf', $response->body());

PHP (Guzzle)

$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/inventory/articles/12/images/31/content', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'sink' => 'kvitto.pdf',
]);

JavaScript

const response = await fetch('https://nonox.app/api/v1/inventory/articles/12/images/31/content', {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const file = Buffer.from(await response.arrayBuffer());

Python

import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/inventory/articles/12/images/31/content",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    timeout=30,
)
response.raise_for_status()

with open("kvitto.pdf", "wb") as file:
    file.write(response.content)

Fel

4011 exempel

No valid credential

{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4035 exempel

Scope missing or permission lost

{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}

The action refuses (for example changing a posted voucher)

{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Outside the IP allowlist

{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Write to an archived company

{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

The company no longer allows the app

{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4041 exempel

Unknown id, other company's id, or module off

{
  "type": "urn:nonox:problem:not_found",
  "title": "Not Found",
  "status": 404,
  "code": "not_found",
  "detail": "Det du söker finns inte.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4291 exempel

Over the limit

{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Lista lagerställen

GET /inventory/locations listStockLocations

Lagerställena som ett träd: lager, zoner, hyllor och fack.

Mer i detalj (på engelska)

The stock locations as a tree: warehouses (with an address), zones, shelves and bins. full_code is the printable code (HL-A-01). Needs inventory:view.

Behörighet

inventory:view

Parametrar

limit integer fråga

Page size, 1–200.

Standard: 50 · minst 1 · högst 200
cursor string fråga

Opaque cursor from meta.next_cursor of the previous page.

högst 2000 tecken
updated_since string (date-time) fråga

Bara poster som ändrats efter den här tiden (ISO 8601). Listor sorteras på updated_at och id.

Exempel: 2026-03-01T00:00:00+01:00

Svar

200 OK – A page of results.

application/jsonobject

data array<StockLocation> krävs
10 fält · varje post
- id integer
- parent_id integer kan vara null
- type string
  
  Värden: WAREHOUSE, ZONE, SHELF, BIN
- code string
- full_code string
- name string kan vara null
- address object kan vara null
- is_active boolean
- created_at string (date-time)
- updated_at string (date-time)
meta ListMeta krävs
3 fält
- limit integer krävs
- next_cursor string krävs kan vara null
  
  Opaque; pass as `cursor` for the next page. null on the last page.
- has_more boolean krävs

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

unauthenticatedNo valid credential

Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

Alla felkoder · application/problem+json

insufficient_scopeScope missing or permission lost

Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.
forbiddenThe action refuses (for example changing a posted voucher)

Behörighet saknas för det här.
ip_not_allowedOutside the IP allowlist

Företaget tillåter inte anrop från den här adressen.
company_archivedWrite to an archived company

Företaget är arkiverat och kan bara läsas.
app_not_allowedThe company no longer allows the app

Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

rate_limitedOver the limit

För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl

curl "https://nonox.app/api/v1/inventory/locations?limit=50&updated_since=2026-03-01T00%3A00%3A00%2B01%3A00" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json"

PHP (Laravel)

use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/inventory/locations', [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
    ]);

$response->throw();

$data = $response->json('data');

PHP (Guzzle)

$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/inventory/locations', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'query' => [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];

JavaScript

const url = new URL('https://nonox.app/api/v1/inventory/locations');
url.searchParams.set('limit', '50');
url.searchParams.set('updated_since', '2026-03-01T00:00:00+01:00');

const response = await fetch(url, {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();

Python

import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/inventory/locations",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    params={
        "limit": 50,
        "updated_since": "2026-03-01T00:00:00+01:00",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json

{
  "data": [
    {
      "id": 4,
      "parent_id": 2,
      "type": "BIN",
      "code": "01",
      "full_code": "HL-A-01",
      "name": null,
      "address": null,
      "is_active": true,
      "created_at": "2026-11-02T09:00:00+01:00",
      "updated_at": "2026-11-02T09:00:00+01:00"
    }
  ],
  "meta": {
    "limit": 50,
    "next_cursor": null,
    "has_more": false
  }
}

Fel

4011 exempel

No valid credential

{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4035 exempel

Scope missing or permission lost

{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}

The action refuses (for example changing a posted voucher)

{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Outside the IP allowlist

{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Write to an archived company

{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

The company no longer allows the app

{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4291 exempel

Over the limit

{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Lista lagersaldon

GET /inventory/stock-levels listStockLevels

Saldot per artikel och lagerställe.

Mer i detalj (på engelska)

The quantity of each article at each location, kept in step with the movement ledger. Filter on location_id or article_id. Needs inventory:view.

Behörighet

inventory:view

Parametrar

limit integer fråga

Page size, 1–200.

Standard: 50 · minst 1 · högst 200
cursor string fråga

Opaque cursor from meta.next_cursor of the previous page.

högst 2000 tecken
updated_since string (date-time) fråga

Bara poster som ändrats efter den här tiden (ISO 8601). Listor sorteras på updated_at och id.

Exempel: 2026-03-01T00:00:00+01:00
location_id integer fråga
article_id integer fråga

Svar

200 OK – A page of results.

application/jsonobject

data array<StockLevel> krävs
7 fält · varje post
- id integer
- article_id integer
- article_number string
- location_id integer
- location_code string
- quantity string
  
  Decimal string, negative when the company allows negative stock.
- updated_at string (date-time)
meta ListMeta krävs
3 fält
- limit integer krävs
- next_cursor string krävs kan vara null
  
  Opaque; pass as `cursor` for the next page. null on the last page.
- has_more boolean krävs

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

unauthenticatedNo valid credential

Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

Alla felkoder · application/problem+json

insufficient_scopeScope missing or permission lost

Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.
forbiddenThe action refuses (for example changing a posted voucher)

Behörighet saknas för det här.
ip_not_allowedOutside the IP allowlist

Företaget tillåter inte anrop från den här adressen.
company_archivedWrite to an archived company

Företaget är arkiverat och kan bara läsas.
app_not_allowedThe company no longer allows the app

Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

rate_limitedOver the limit

För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl

curl "https://nonox.app/api/v1/inventory/stock-levels?limit=50&updated_since=2026-03-01T00%3A00%3A00%2B01%3A00" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json"

PHP (Laravel)

use Illuminate\Support\Facades\Http;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->get('https://nonox.app/api/v1/inventory/stock-levels', [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
    ]);

$response->throw();

$data = $response->json('data');

PHP (Guzzle)

$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('GET', 'https://nonox.app/api/v1/inventory/stock-levels', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
    ],
    'query' => [
        'limit' => 50,
        'updated_since' => '2026-03-01T00:00:00+01:00',
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];

JavaScript

const url = new URL('https://nonox.app/api/v1/inventory/stock-levels');
url.searchParams.set('limit', '50');
url.searchParams.set('updated_since', '2026-03-01T00:00:00+01:00');

const response = await fetch(url, {
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
  },
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();

Python

import os
import requests

response = requests.get(
    "https://nonox.app/api/v1/inventory/stock-levels",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
    },
    params={
        "limit": 50,
        "updated_since": "2026-03-01T00:00:00+01:00",
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 200

application/json

{
  "data": [
    {
      "id": 31,
      "article_id": 12,
      "article_number": "V-1",
      "location_id": 4,
      "location_code": "HL-A-01",
      "quantity": "10",
      "updated_at": "2026-11-02T09:00:00+01:00"
    }
  ],
  "meta": {
    "limit": 50,
    "next_cursor": null,
    "has_more": false
  }
}

Fel

4011 exempel

No valid credential

{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4035 exempel

Scope missing or permission lost

{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}

The action refuses (for example changing a posted voucher)

{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Outside the IP allowlist

{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Write to an archived company

{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

The company no longer allows the app

{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4291 exempel

Over the limit

{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Skapa en inleverans

POST /inventory/receipts createStockReceipt

Skapar en inleverans och tar emot den direkt med "receive": true. Inget bokförs.

Mer i detalj (på engelska)

Creates an inleverans with lines of article, quantity, location and cost (unit_cost_ore, whole öre per unit; the article purchase price when left out). With "receive": true every line is received at once on received_on (today by default) and the stock grows; otherwise it waits to be received in NONOX. Nothing is booked in the ledger. Same Actions as the app (SaveReceipt, ReceiveStock). Needs inventory:manage.

Behörighet

inventory:manage

Parametrar

Idempotency-Key string huvud krävs

Krävs på varje POST. Ett unikt värde per avsedd åtgärd (helst ett UUID). Sparas i 24 timmar per nyckel eller app, så att ett nytt försök aldrig bokför två gånger.

minst 1 tecken · högst 255 tecken · Exempel: 3f6c1b7e-2d4a-4e8b-9c0d-5a1b2c3d4e5f

Innehåll i anropet

application/jsonStockReceiptInput krävs

supplier_id integer kan vara null
supplier_invoice_id string (uuid) kan vara null
expected_on string (date) kan vara null
reference string kan vara null
note string kan vara null
receive boolean

Receive every line at once.
received_on string (date)
lines array<object> krävs
4 fält · varje post
- article_id integer krävs
- location_id integer kan vara null
  
  Where the goods go; the article default location when left out.
- quantity string krävs
  
  Integer, or a decimal string with up to three decimals ("2.5").
- unit_cost_ore integer kan vara null

Svar

201 Created – The receipt.

application/jsonobject

data StockReceipt krävs
10 fält
- id integer
- number integer
- status string
  
  Värden: OPEN, PARTIAL, RECEIVED, CANCELLED
- supplier_id integer kan vara null
- supplier_invoice_id string kan vara null
- expected_on string kan vara null
- reference string kan vara null
- lines array<object>
- created_at string (date-time)
- updated_at string (date-time)

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Idempotent-Replayed

400 Bad Request – Bad request: missing or invalid Idempotency-Key, or a body that is not a JSON object.

Alla felkoder · application/problem+json

idempotency_key_requiredNo Idempotency-Key on a POST

Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.
idempotency_key_invalidIdempotency-Key too long or not visible ASCII

Idempotency-Key ska vara 1–255 synliga ASCII-tecken.
invalid_jsonMalformed JSON

Kroppen är inte giltig JSON (ett objekt).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

401 Unauthorized – Missing, invalid, expired or revoked token or API key. Also returned when the person behind the credential has left the company (an OAuth grant is then revoked for good).

Alla felkoder · application/problem+json

unauthenticatedNo valid credential

Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, WWW-Authenticate

Alla felkoder · application/problem+json

insufficient_scopeScope missing or permission lost

Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.
forbiddenThe action refuses (for example changing a posted voucher)

Behörighet saknas för det här.
ip_not_allowedOutside the IP allowlist

Företaget tillåter inte anrop från den här adressen.
company_archivedWrite to an archived company

Företaget är arkiverat och kan bara läsas.
app_not_allowedThe company no longer allows the app

Företaget tillåter inte längre den här appen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

409 Conflict – A request with the same Idempotency-Key is still running.

Alla felkoder · application/problem+json

idempotency_in_progressSame key, first request not finished

En begäran med samma Idempotency-Key pågår. Vänta och försök igen.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

415 Unsupported Media Type – The body is not application/json (or multipart/form-data where a file is accepted).

Alla felkoder · application/problem+json

unsupported_media_typeWrong Content-Type

Skicka JSON (application/json).

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

422 Unprocessable Content – Validation failed, or the Idempotency-Key was already used for a different request.

Alla felkoder · application/problem+json

validation_failedField errors

Uppgifterna kunde inte godtas. Se errors.
idempotency_key_reusedSame key, different body

Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset

429 Too Many Requests – Rate limit exceeded (per credential, per company or per address). Wait Retry-After seconds.

Alla felkoder · application/problem+json

rate_limitedOver the limit

För många anrop. Försök igen om 23 sekunder.

Svarshuvuden: X-Request-Id, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After

Kodexempel

curl

curl -X POST "https://nonox.app/api/v1/inventory/receipts" \
  -H "Authorization: Bearer $NONOX_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "supplier_id": 3,
  "reference": "Följesedel 4411",
  "receive": true,
  "received_on": "2026-11-02",
  "lines": [
    {
      "article_id": 12,
      "location_id": 4,
      "quantity": "10",
      "unit_cost_ore": 8000
    }
  ]
}'

PHP (Laravel)

use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;

$response = Http::withToken(config('services.nonox.token'))
    ->acceptJson()
    ->withHeaders(['Idempotency-Key' => (string) Str::uuid()])
    ->post('https://nonox.app/api/v1/inventory/receipts', [
        'supplier_id' => 3,
        'reference' => 'Följesedel 4411',
        'receive' => true,
        'received_on' => '2026-11-02',
        'lines' => [
            [
                'article_id' => 12,
                'location_id' => 4,
                'quantity' => '10',
                'unit_cost_ore' => 8000,
            ],
        ],
    ]);

$response->throw();

$data = $response->json('data');

PHP (Guzzle)

$client = new \GuzzleHttp\Client(['timeout' => 30]);

$response = $client->request('POST', 'https://nonox.app/api/v1/inventory/receipts', [
    'headers' => [
        'Authorization' => 'Bearer '.getenv('NONOX_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => bin2hex(random_bytes(16)),
    ],
    'json' => [
        'supplier_id' => 3,
        'reference' => 'Följesedel 4411',
        'receive' => true,
        'received_on' => '2026-11-02',
        'lines' => [
            [
                'article_id' => 12,
                'location_id' => 4,
                'quantity' => '10',
                'unit_cost_ore' => 8000,
            ],
        ],
    ],
]);

$data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR)['data'];

JavaScript

const response = await fetch('https://nonox.app/api/v1/inventory/receipts', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NONOX_TOKEN}`,
    Accept: 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "supplier_id": 3,
    "reference": "Följesedel 4411",
    "receive": true,
    "received_on": "2026-11-02",
    "lines": [
      {
        "article_id": 12,
        "location_id": 4,
        "quantity": "10",
        "unit_cost_ore": 8000
      }
    ]
  }),
});

if (!response.ok) {
  const problem = await response.json();
  throw new Error(`${problem.code}: ${problem.detail}`);
}

const { data } = await response.json();

Python

import os
import uuid
import requests

response = requests.post(
    "https://nonox.app/api/v1/inventory/receipts",
    headers={
        "Authorization": f"Bearer {os.environ['NONOX_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "supplier_id": 3,
        "reference": "Följesedel 4411",
        "receive": True,
        "received_on": "2026-11-02",
        "lines": [
            {
                "article_id": 12,
                "location_id": 4,
                "quantity": "10",
                "unit_cost_ore": 8000,
            },
        ],
    },
    timeout=30,
)
response.raise_for_status()

data = response.json()["data"]

Svar · 201

application/json

{
  "data": {
    "id": 7,
    "number": 7,
    "status": "RECEIVED",
    "supplier_id": 3,
    "supplier_invoice_id": null,
    "expected_on": null,
    "reference": "Följesedel 4411",
    "lines": [
      {
        "id": 15,
        "article_id": 12,
        "location_id": 4,
        "quantity": "10",
        "received": "10",
        "unit_cost_ore": 8000
      }
    ],
    "created_at": "2026-11-02T09:00:00+01:00",
    "updated_at": "2026-11-02T09:00:00+01:00"
  }
}

Fel

4003 exempel

No Idempotency-Key on a POST

{
  "type": "urn:nonox:problem:idempotency_key_required",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_required",
  "detail": "Skicka en unik Idempotency-Key (till exempel ett UUID) med varje POST, så att ett nytt försök aldrig bokför två gånger.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Idempotency-Key too long or not visible ASCII

{
  "type": "urn:nonox:problem:idempotency_key_invalid",
  "title": "Bad Request",
  "status": 400,
  "code": "idempotency_key_invalid",
  "detail": "Idempotency-Key ska vara 1–255 synliga ASCII-tecken.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Malformed JSON

{
  "type": "urn:nonox:problem:invalid_json",
  "title": "Bad Request",
  "status": 400,
  "code": "invalid_json",
  "detail": "Kroppen är inte giltig JSON (ett objekt).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4011 exempel

No valid credential

{
  "type": "urn:nonox:problem:unauthenticated",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthenticated",
  "detail": "Nyckeln eller token saknas, är ogiltig, har gått ut eller har återkallats.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4035 exempel

Scope missing or permission lost

{
  "type": "urn:nonox:problem:insufficient_scope",
  "title": "Forbidden",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Nyckeln eller appen saknar behörigheten vouchers:post, eller så har personen som gav den inte längre den behörigheten i företaget.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "required_scopes": [
    "vouchers:post"
  ]
}

The action refuses (for example changing a posted voucher)

{
  "type": "urn:nonox:problem:forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Behörighet saknas för det här.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Outside the IP allowlist

{
  "type": "urn:nonox:problem:ip_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "Företaget tillåter inte anrop från den här adressen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

Write to an archived company

{
  "type": "urn:nonox:problem:company_archived",
  "title": "Forbidden",
  "status": 403,
  "code": "company_archived",
  "detail": "Företaget är arkiverat och kan bara läsas.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

The company no longer allows the app

{
  "type": "urn:nonox:problem:app_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "app_not_allowed",
  "detail": "Företaget tillåter inte längre den här appen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4091 exempel

Same key, first request not finished

{
  "type": "urn:nonox:problem:idempotency_in_progress",
  "title": "Conflict",
  "status": 409,
  "code": "idempotency_in_progress",
  "detail": "En begäran med samma Idempotency-Key pågår. Vänta och försök igen.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4151 exempel

Wrong Content-Type

{
  "type": "urn:nonox:problem:unsupported_media_type",
  "title": "Unsupported Media Type",
  "status": 415,
  "code": "unsupported_media_type",
  "detail": "Skicka JSON (application/json).",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4222 exempel

Field errors

{
  "type": "urn:nonox:problem:validation_failed",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "validation_failed",
  "detail": "Uppgifterna kunde inte godtas. Se errors.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17",
  "errors": {
    "rows": [
      "Verifikationen balanserar inte: debet och kredit skiljer sig åt."
    ],
    "voucher_date": [
      "Det finns inget räkenskapsår som omfattar 2031-01-01."
    ]
  }
}

Same key, different body

{
  "type": "urn:nonox:problem:idempotency_key_reused",
  "title": "Unprocessable Content",
  "status": 422,
  "code": "idempotency_key_reused",
  "detail": "Idempotency-Key har redan använts för en annan begäran. Använd en ny nyckel för en ny begäran.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}

4291 exempel

Over the limit

{
  "type": "urn:nonox:problem:rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "code": "rate_limited",
  "detail": "För många anrop. Försök igen om 23 sekunder.",
  "instance": "urn:nonox:request:7f3c2a9e-4b1d-4c8e-9a51-2d6f0e8b3c17"
}