Download Invoice PDF

Download the PDF representación impresa for an invoice

curl --request GET \
  --url https://api.timbrix.mx/invoices/{uuid}/pdf \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.timbrix.mx/invoices/{uuid}/pdf', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.timbrix.mx/invoices/{uuid}/pdf",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.timbrix.mx/invoices/{uuid}/pdf"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.timbrix.mx/invoices/{uuid}/pdf")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'

response = http.request(request)
puts response.read_body

"<string>"

GET

invoices

{uuid}

pdf

Download the PDF representación impresa for an invoice

curl --request GET \
  --url https://api.timbrix.mx/invoices/{uuid}/pdf \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.timbrix.mx/invoices/{uuid}/pdf', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.timbrix.mx/invoices/{uuid}/pdf",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.timbrix.mx/invoices/{uuid}/pdf"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.timbrix.mx/invoices/{uuid}/pdf")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'

response = http.request(request)
puts response.read_body

"<string>"

Returns the PDF representación impresa (printed representation) of a stamped CFDI as a downloadable attachment. Like Cancel Invoice, this is a flat route — it does not carry /organizations/{organizationId}/ in the URL. The invoice’s uuid (its folio fiscal, globally unique across all organizations) is enough to resolve the owning organization server-side, combined with the caller’s own auth context (session or API key).

The PDF is generated on-demand from the stamped CFDI XML on every call — no PDF is stored or persisted server-side. Each request regenerates it fresh, so it always reflects the invoice’s current data (e.g. cancelado status).

Authentication

Accepts either:

A Supabase Bearer session (Authorization: Bearer <token>) — the authenticated user must be a member of the invoice’s organization.
An API key (X-API-Key: sk_...) with the read:invoices scope — the key’s own organization must match the invoice’s organization, or the request is rejected with 403 Forbidden.

Path Parameters

Parameter	Type	Required	Description
`uuid`	string (UUID)	Yes	Folio fiscal UUID (`uuidFiscal`) of the invoice to fetch — globally unique, not scoped to an organization

Example Request

cURL

curl -X GET https://api.timbrix.mx/invoices/d3bfbc57-44af-4390-a064-f0afab85e5df/pdf \
  -H "Authorization: Bearer <your_token>" \
  -o invoice.pdf

TypeScript SDK

// Returns a Blob — write it to disk or hand it to the browser as a download.
const pdf = await timbrix.invoices.getPdf(
  "d3bfbc57-44af-4390-a064-f0afab85e5df"
)

Example Response

This endpoint does not return a JSON body — it streams the generated PDF file with:

Header	Value
`Content-Type`	`application/pdf`
`Content-Disposition`	`attachment; filename="<uuid>.pdf"`

Common Errors

401 Unauthorized

Missing or invalid Bearer token / API key.

403 Forbidden

The authenticated user is not a member of the invoice’s organization, or the API key does not have the read:invoices scope / belongs to a different organization than the one that owns the invoice.

404 Not Found

uuid does not match any invoice.

Authorizations

X-API-Key

string

header

required

API Key for authentication (format: sk_...)

Path Parameters

uuid

string

required

Folio fiscal UUID of the invoice

Response

The generated PDF representación impresa

The response is of type file.

API documentation

Organizations

Members

Invites

Auth

OAuth

Customers

SAT Catalogs

Invoices

Products

Users

Webhooks

API Keys

Authentication

Path Parameters

Example Request

Example Response

Common Errors

401 Unauthorized

403 Forbidden

404 Not Found

Authorizations

Path Parameters

Response

​Authentication

​Path Parameters

​Example Request

​Example Response

​Common Errors

​401 Unauthorized

​403 Forbidden

​404 Not Found

Authorizations

Path Parameters

Response

Authentication

Path Parameters

Example Request

Example Response

Common Errors

401 Unauthorized

403 Forbidden

404 Not Found