> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qumo-deploy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List an organization's invoices

> The organization's Stripe invoices, newest first. Empty when the organization
has never subscribed.




## OpenAPI

````yaml /api-reference/openapi.yaml get /v1/organizations/{id}/invoices
openapi: 3.1.0
info:
  title: Qumo Deploy REST API
  description: >
    The Qumo Deploy control plane: organizations, projects, signing keys,
    machine

    identities, access control, audit and billing. Relay credentials are not

    issued here: your app signs them with its own

    [signing keys](/guides/signing-keys).


    Every operation here is generated against the routes the server registers

    and checked in CI, so an operation in this reference exists and a route

    missing from it is deliberately internal (relay mesh, webhooks, probes,

    operator-only and browser sign-in routes).


    Errors are JSON objects with one `error` field. What each status code means

    is in [Error codes](/guides/error-codes); the token scope each permission

    needs is in [Scopes and permissions](/guides/scopes-permissions).
  version: 1.0.0
servers:
  - url: https://api.qumo-deploy.com
    description: Public API (Bearer tokens only; cookies are ignored)
security: []
tags:
  - name: Account
    description: The signed-in user's own sessions, tokens, security settings and data.
  - name: Device flow
    description: OAuth 2.0 device authorization, used by `qumod login`.
  - name: Organizations
    description: Organizations, their members and usage.
  - name: Projects
    description: Projects inside an organization.
  - name: Signing keys
    description: Keys your app signs relay credentials with.
  - name: Relays
    description: Where clients of a broadcast path connect.
  - name: Identities
    description: Machine identities, their tokens and IP allowlists.
  - name: Access control
    description: Roles, IAM bindings and invitations.
  - name: Audit
    description: The audit log and its webhook.
  - name: Notifications
    description: Notification policies.
  - name: Billing
    description: Plans, usage cost, budgets, invoices and payment methods.
  - name: Pricing
    description: Public price list.
paths:
  /v1/organizations/{id}/invoices:
    get:
      tags:
        - Billing
      summary: List an organization's invoices
      description: >
        The organization's Stripe invoices, newest first. Empty when the
        organization

        has never subscribed.
      operationId: listOrganizationInvoices
      parameters:
        - name: id
          in: path
          required: true
          description: The organization ID.
          schema:
            type: string
            format: uuid
          example: 3f8c2a1e-7b4d-4e9a-9c61-2d5e8f0a1b7c
      responses:
        '200':
          description: The invoices.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvoiceList'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
      security:
        - token: []
        - cliSession: []
        - sessionCookie: []
components:
  schemas:
    InvoiceList:
      type: object
      required:
        - invoices
      properties:
        invoices:
          type: array
          items:
            $ref: '#/components/schemas/Invoice'
    Invoice:
      type: object
      required:
        - id
        - amount_due
        - currency
        - status
        - period_start
        - period_end
        - pdf_url
        - created_at
      properties:
        id:
          type: string
          description: Stripe's invoice ID.
          example: in_1QxR9bLkdIwHu7ixT3cVq8Lm
        amount_due:
          type: integer
          format: int64
          description: Amount due in the currency's smallest unit (cents for USD).
          example: 2900
        currency:
          type: string
          description: Lowercase ISO currency code.
          example: usd
        status:
          type: string
          enum:
            - draft
            - open
            - paid
            - uncollectible
            - void
          example: paid
        period_start:
          type: integer
          format: int64
          description: Start of the billed period, in Unix seconds.
          example: 1759276800
        period_end:
          type: integer
          format: int64
          description: End of the billed period, in Unix seconds.
          example: 1761955200
        pdf_url:
          type: string
          description: Link to the invoice PDF; empty when Stripe has none yet.
          example: >-
            https://pay.stripe.com/invoice/acct_1QxR7aLkdIwHu7ix/live_YWNjdF8x/pdf
        created_at:
          type: integer
          format: int64
          description: When the invoice was created, in Unix seconds.
          example: 1761958800
    Error:
      type: object
      required:
        - error
      properties:
        error:
          type: string
          description: A human-readable message.
          example: organization_id is required
  responses:
    Unauthorized:
      description: Missing or invalid credentials. See [Error codes](/guides/error-codes).
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Forbidden:
      description: >-
        Authenticated but not allowed (permission, token scope, IP allowlist or
        CSRF). See [Error codes](/guides/error-codes).
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  securitySchemes:
    token:
      type: http
      scheme: bearer
      bearerFormat: qumo_pat_
      description: >
        A personal access token (`POST /v1/auth/tokens`) or a machine

        identity token (`POST
        /v1/projects/{project_id}/identities/{identity_id}/tokens`),

        both prefixed `qumo_pat_`. A token's scopes cap what it can do; see

        [Scopes and permissions](/guides/scopes-permissions). A personal

        token names no organization: on a route whose path names no project or

        organization, pass `?organization_id=`.
    cliSession:
      type: http
      scheme: bearer
      description: |
        The session token `qumod login` obtains through the device flow
        (`POST /v1/auth/device/token`). It acts as the signed-in user, like a
        console session, and needs no CSRF token.
    sessionCookie:
      type: apiKey
      in: cookie
      name: __Host-qumo_session
      description: |
        The console's browser session. Accepted only on the console origin
        (`https://console.qumo-deploy.com`), never on `api.qumo-deploy.com`.
        A request that changes state must also send `X-CSRF-Token`.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.