Get Invoice

Get a single invoice by folio fiscal UUID

curl --request GET \
  --url https://api.timbrix.mx/invoices/{uuid} \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.timbrix.mx/invoices/{uuid}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.timbrix.mx/invoices/{uuid}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.timbrix.mx/invoices/{uuid}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.timbrix.mx/invoices/{uuid}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "id": "0f2a1c3e-1a2b-4c3d-9e8f-1234567890ab",
  "uuid": "d3bfbc57-44af-4390-a064-f0afab85e5df",
  "status": "valid",
  "type": "I",
  "series": "A",
  "folioNumber": "1",
  "total": 116,
  "date": "2026-07-30T22:50:00",
  "xml": "<string>",
  "createdAt": "2026-07-30T22:50:03.412Z"
}

GET

invoices

{uuid}

Get a single invoice by folio fiscal UUID

curl --request GET \
  --url https://api.timbrix.mx/invoices/{uuid} \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.timbrix.mx/invoices/{uuid}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.timbrix.mx/invoices/{uuid}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.timbrix.mx/invoices/{uuid}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.timbrix.mx/invoices/{uuid}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "id": "0f2a1c3e-1a2b-4c3d-9e8f-1234567890ab",
  "uuid": "d3bfbc57-44af-4390-a064-f0afab85e5df",
  "status": "valid",
  "type": "I",
  "series": "A",
  "folioNumber": "1",
  "total": 116,
  "date": "2026-07-30T22:50:00",
  "xml": "<string>",
  "createdAt": "2026-07-30T22:50:03.412Z"
}

Returns a single stamped CFDI invoice by its folio fiscal UUID, in the same shape as the Create Invoice response — including the full XML inline. Like Cancel Invoice, this is a flat route — it does not carry /organizations/{organizationId}/ in the URL. The invoice’s uuid (its folio fiscal, globally unique across all organizations) is enough to resolve the owning organization server-side, combined with the caller’s own auth context (session or API key).

Authentication

Accepts either:

A Supabase Bearer session (Authorization: Bearer <token>) — the authenticated user must be a member of the invoice’s organization.
An API key (X-API-Key: sk_...) with the read:invoices scope — the key’s own organization must match the invoice’s organization, or the request is rejected with 403 Forbidden.

Path Parameters

Parameter	Type	Required	Description
`uuid`	string (UUID)	Yes	Folio fiscal UUID (`uuidFiscal`) of the invoice to fetch — globally unique, not scoped to an organization

Example Request

cURL

curl -X GET https://api.timbrix.mx/invoices/d3bfbc57-44af-4390-a064-f0afab85e5df \
  -H "Authorization: Bearer <your_token>"

TypeScript SDK

const invoice = await timbrix.invoices.get(
  "d3bfbc57-44af-4390-a064-f0afab85e5df"
)
console.log(invoice.xml)

Example Response

{
  "id": "0f2a1c3e-1a2b-4c3d-9e8f-1234567890ab",
  "uuid": "d3bfbc57-44af-4390-a064-f0afab85e5df",
  "status": "valid",
  "type": "I",
  "series": "A",
  "folioNumber": "1",
  "total": 116,
  "date": "2026-07-30T15:50:00",
  "xml": "<?xml version=\"1.0\" encoding=\"UTF-8\"?><cfdi:Comprobante ...>",
  "createdAt": "2026-07-30T15:50:03.412Z"
}

Field	Type	Description
`id`	string	Timbrix invoice record ID
`uuid`	string	Folio fiscal UUID asignado por el SAT vía PAC
`status`	string	Always `"valid"` — this endpoint only ever returns stamped CFDIs
`type`	string	`I` = Ingreso, `E` = Egreso, `T` = Traslado
`series`	string	Invoice series
`folioNumber`	string	Invoice folio number
`total`	number	Invoice total
`date`	string	Issuance date-time (ISO 8601, no timezone)
`xml`	string	The full stamped CFDI XML, inline (UTF-8)
`createdAt`	string	ISO 8601 timestamp of when the CFDI was stamped

This response includes status, type, and the full xml — fields not present in the List Invoices summary shape. If you only need the XML file itself (not wrapped in JSON), use Download Invoice XML instead.

Common Errors

401 Unauthorized

Missing or invalid Bearer token / API key.

403 Forbidden

The authenticated user is not a member of the invoice’s organization, or the API key does not have the read:invoices scope / belongs to a different organization than the one that owns the invoice.

404 Not Found

uuid does not match any invoice.

Authorizations

X-API-Key

string

header

required

API Key for authentication (format: sk_...)

Path Parameters

uuid

string

required

Folio fiscal UUID of the invoice

Response

string

required

Timbrix invoice record ID

Example:

"0f2a1c3e-1a2b-4c3d-9e8f-1234567890ab"

uuid

string

required

Folio fiscal UUID asignado por el SAT vía PAC

Example:

"d3bfbc57-44af-4390-a064-f0afab85e5df"

status

enum<string>

required

Available options:

valid

Example:

"valid"

type

enum<string>

required

I = Ingreso, E = Egreso, T = Traslado

Available options:

I,

E,

T

Example:

"I"

series

string

required

Example:

"A"

folioNumber

string

required

Example:

"1"

total

number

required

Example:

116

date

string

required

Example:

"2026-07-30T22:50:00"

xml

string

required

XML del CFDI timbrado (UTF-8)

createdAt

string

required

Example:

"2026-07-30T22:50:03.412Z"

API documentation

Organizations

Members

Invites

Auth

OAuth

Customers

SAT Catalogs

Invoices

Products

Users

Webhooks

API Keys

Authentication

Path Parameters

Example Request

Example Response

Common Errors

401 Unauthorized

403 Forbidden

404 Not Found

Authorizations

Path Parameters

Response

​Authentication

​Path Parameters

​Example Request

​Example Response

​Common Errors

​401 Unauthorized

​403 Forbidden

​404 Not Found

Authorizations

Path Parameters

Response

Authentication

Path Parameters

Example Request

Example Response

Common Errors

401 Unauthorized

403 Forbidden

404 Not Found