Webhook obaveštenja

Potpisana obaveštenja o promenama na vaše HTTPS adrese i tok istih događaja. Obaveštenje nikad nije dokaz fiskalizacije.

11 operacija

Tok događaja

get/v1/events

Scopewebhooks:read

Isti događaji koje webhook obaveštenja guraju, najstariji prvi, za poslednjih 30 dana. Sačuvajte `nextCursor` i pošaljite ga kao `after` sledeći put; kada nema novih događaja, vraća se isti kursor.

GET/v1/events

curl -X GET "https://api.bokapos.rs/v1/events?after=1041&types=fiscal-document.fiscalized%2Cfiscal-document.outcome-unknown&limit=100" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

200OK

{
  "items": [
    {
      "id": "21c0738c-e29c-480f-92a9-fb88a99dc514",
      "type": "fiscal-document.fiscalized",
      "timestamp": "2026-11-02T09:14:03.512+00:00",
      "environment": "sandbox",
      "data": {
        "fiscalDocumentId": "9f8e7d6c-5b4a-4321-8765-0fedcba98761",
        "taxpayerId": "3f9c2a8e-6b1d-4e5a-9c47-1d2b8e6f0a11",
        "businessPremiseId": "b7d4e2c1-9a3f-4c8e-8f21-6e5a0c9d3b22",
        "status": "FISCALIZED",
        "invoiceType": "NORMAL",
        "transactionType": "SALE",
        "clientReference": "ORDER-4127",
        "idempotencyKey": "order-4127-sale-1",
        "pfrInvoiceNumber": "JWX4K9PL-JWX4K9PL-1042",
        "pfrSdcTime": "2026-11-02T10:14:03.1+01:00",
        "totalAmount": 8990,
        "verificationUrl": "https://sandbox.suf.purs.gov.rs/v/?vl=A0pXWDRLOVBMSldYNEs5UEwSBAAAEAQAAKCLPAAAAAAAAAABnAqJa1EAAAA...",
        "failureCode": null
      }
    }
  ],
  "nextCursor": "1042",
  "hasMore": false
}

Sačuvajte nextCursor i pošaljite ga kao after sledeći put. Dok je hasMore: true, odmah tražite sledeću stranu.

Beleške iz ugovora (OpenAPI, engleski)

Keep `nextCursor` and send it as `after` on the next call; with nothing new the same cursor comes back. Events appear a moment after they commit and stay for 30 days. Test events never appear. Scoped to the caller's environment like every other read.

Parametri

listEvents: Parametri
Polje	Opis
`after`opcionoGde: queryTip: string	Opaque cursor from a previous page. pattern ^[0-9]{1,19}$
`types`opcionoGde: queryTip: string	Comma-separated event types to include.
`limit`opcionoGde: queryTip: integer	>= 1<= 200default 100

Odgovori

listEvents: Odgovori
200OK	Page of events`WebhookEventPage`
422Unprocessable Content	The command violates a Boka or fiscal rule`ErrorCode`

Odgovor: WebhookEventPage

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

listEvents: Odgovor
Polje	Opis
`items`obaveznoTip: array<WebhookEvent>
`id`obaveznoTip: uuid
`type`obaveznoTip: string	A WebhookEventType, or webhook-endpoint.test on a pushed test event.
`timestamp`obaveznoTip: date-time	When the change happened, not when it was delivered.
`environment`obaveznoTip: string	Vrednosti`sandboxproduction`
`data`obaveznoTip: WebhookFiscalDocumentData \| WebhookReceiptDeliveryData \| WebhookSecurityElementData \| WebhookLicenseData \| WebhookTestData	Jedna od varijanti: WebhookFiscalDocumentData \| WebhookReceiptDeliveryData \| WebhookSecurityElementData \| WebhookLicenseData \| WebhookTestData
WebhookFiscalDocumentData
`fiscalDocumentId`obaveznoTip: uuid
`taxpayerId`obaveznoTip: uuid
`businessPremiseId`obaveznoTip: uuid
`status`obaveznoTip: string	Vrednosti`FISCALIZEDOUTCOME_UNKNOWN`
`invoiceType`obaveznoTip: InvoiceType	Vrednosti`NORMALPROFORMACOPYTRAININGADVANCE`
`transactionType`obaveznoTip: TransactionType	Vrednosti`SALEREFUND`
`clientReference`obaveznoTip: string \| null (može biti null)
`idempotencyKey`obaveznoTip: string
`pfrInvoiceNumber`obaveznoTip: string \| null (može biti null)
`pfrSdcTime`obaveznoTip: date-time \| null (može biti null)
`totalAmount`obaveznoTip: number \| null (može biti null)
`verificationUrl`obaveznoTip: uri \| null (može biti null)
`failureCode`obaveznoTip: string \| null (može biti null)
WebhookReceiptDeliveryData
`receiptDeliveryId`obaveznoTip: uuid
`fiscalDocumentId`obaveznoTip: uuid
`taxpayerId`obaveznoTip: uuid
`businessPremiseId`obaveznoTip: uuid
`channel`obaveznoTip: const "EMAIL"
`status`obaveznoTip: string	Vrednosti`DELIVEREDFAILED`
`attempts`obaveznoTip: integer	>= 1
`deliveredAt`obaveznoTip: date-time \| null (može biti null)
`failureCode`obaveznoTip: string \| null (može biti null)
WebhookSecurityElementData
`securityElementId`obaveznoTip: uuid
`taxpayerId`obaveznoTip: uuid
`businessPremiseId`obaveznoTip: uuid
`jid`obaveznoTip: string
`status`obaveznoTip: string	Vrednosti`activesuspendedretired`
`certificateNotAfter`obaveznoTip: date-time
`expiryStatus`opcionoTip: string	Only on security-element.expiring. Vrednosti`warningcritical`
`daysRemaining`opcionoTip: integer	Whole days until the certificate expires; only on security-element.expiring. >= 0
WebhookLicenseData
`status`obaveznoTip: string	Vrednosti`activesuspended`
`startsOn`obaveznoTip: date
`endsOn`obaveznoTip: date \| null (može biti null)
`advanceModuleEnabled`obaveznoTip: boolean
`emailModuleEnabled`obaveznoTip: boolean
WebhookTestData
`webhookEndpointId`obaveznoTip: uuid
`nextCursor`obaveznoTip: string \| null (može biti null)	Send as after next time; null only before the first event.
`hasMore`obaveznoTip: boolean

Pročitaj događaj

get/v1/events/{eventId}

Scopewebhooks:read

Jedan događaj iz poslednjih 30 dana, isti oblik kao telo webhook zahteva. Probni događaji se ovde ne čitaju.

GET/v1/events/{eventId}

curl -X GET "https://api.bokapos.rs/v1/events/21c0738c-e29c-480f-92a9-fb88a99dc514" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

{
  "id": "21c0738c-e29c-480f-92a9-fb88a99dc514",
  "type": "fiscal-document.fiscalized",
  "timestamp": "2026-11-02T09:14:03.512+00:00",
  "environment": "sandbox",
  "data": {
    "fiscalDocumentId": "9f8e7d6c-5b4a-4321-8765-0fedcba98761",
    "taxpayerId": "3f9c2a8e-6b1d-4e5a-9c47-1d2b8e6f0a11",
    "businessPremiseId": "b7d4e2c1-9a3f-4c8e-8f21-6e5a0c9d3b22",
    "status": "FISCALIZED",
    "invoiceType": "NORMAL",
    "transactionType": "SALE",
    "clientReference": "ORDER-4127",
    "idempotencyKey": "order-4127-sale-1",
    "pfrInvoiceNumber": "JWX4K9PL-JWX4K9PL-1042",
    "pfrSdcTime": "2026-11-02T10:14:03.1+01:00",
    "totalAmount": 8990,
    "verificationUrl": "https://sandbox.suf.purs.gov.rs/v/?vl=A0pXWDRLOVBMSldYNEs5UEwSBAAAEAQAAKCLPAAAAAAAAAABnAqJa1EAAAA...",
    "failureCode": null
  }
}

Parametri

getEvent: Parametri
Polje	Opis
`eventId`obaveznoGde: pathTip: uuid

Odgovori

getEvent: Odgovori
200OK	Event`WebhookEvent`
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`

Odgovor: WebhookEvent

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

getEvent: Odgovor
Polje	Opis
`id`obaveznoTip: uuid
`type`obaveznoTip: string	A WebhookEventType, or webhook-endpoint.test on a pushed test event.
`timestamp`obaveznoTip: date-time	When the change happened, not when it was delivered.
`environment`obaveznoTip: string	Vrednosti`sandboxproduction`
`data`obaveznoTip: WebhookFiscalDocumentData \| WebhookReceiptDeliveryData \| WebhookSecurityElementData \| WebhookLicenseData \| WebhookTestData	Jedna od varijanti: WebhookFiscalDocumentData \| WebhookReceiptDeliveryData \| WebhookSecurityElementData \| WebhookLicenseData \| WebhookTestData
WebhookFiscalDocumentData
`fiscalDocumentId`obaveznoTip: uuid
`taxpayerId`obaveznoTip: uuid
`businessPremiseId`obaveznoTip: uuid
`status`obaveznoTip: string	Vrednosti`FISCALIZEDOUTCOME_UNKNOWN`
`invoiceType`obaveznoTip: InvoiceType	Vrednosti`NORMALPROFORMACOPYTRAININGADVANCE`
`transactionType`obaveznoTip: TransactionType	Vrednosti`SALEREFUND`
`clientReference`obaveznoTip: string \| null (može biti null)
`idempotencyKey`obaveznoTip: string
`pfrInvoiceNumber`obaveznoTip: string \| null (može biti null)
`pfrSdcTime`obaveznoTip: date-time \| null (može biti null)
`totalAmount`obaveznoTip: number \| null (može biti null)
`verificationUrl`obaveznoTip: uri \| null (može biti null)
`failureCode`obaveznoTip: string \| null (može biti null)
WebhookReceiptDeliveryData
`receiptDeliveryId`obaveznoTip: uuid
`fiscalDocumentId`obaveznoTip: uuid
`taxpayerId`obaveznoTip: uuid
`businessPremiseId`obaveznoTip: uuid
`channel`obaveznoTip: const "EMAIL"
`status`obaveznoTip: string	Vrednosti`DELIVEREDFAILED`
`attempts`obaveznoTip: integer	>= 1
`deliveredAt`obaveznoTip: date-time \| null (može biti null)
`failureCode`obaveznoTip: string \| null (može biti null)
WebhookSecurityElementData
`securityElementId`obaveznoTip: uuid
`taxpayerId`obaveznoTip: uuid
`businessPremiseId`obaveznoTip: uuid
`jid`obaveznoTip: string
`status`obaveznoTip: string	Vrednosti`activesuspendedretired`
`certificateNotAfter`obaveznoTip: date-time
`expiryStatus`opcionoTip: string	Only on security-element.expiring. Vrednosti`warningcritical`
`daysRemaining`opcionoTip: integer	Whole days until the certificate expires; only on security-element.expiring. >= 0
WebhookLicenseData
`status`obaveznoTip: string	Vrednosti`activesuspended`
`startsOn`obaveznoTip: date
`endsOn`obaveznoTip: date \| null (može biti null)
`advanceModuleEnabled`obaveznoTip: boolean
`emailModuleEnabled`obaveznoTip: boolean
WebhookTestData
`webhookEndpointId`obaveznoTip: uuid

Lista webhook adresa

get/v1/webhook-endpoints

Scopewebhooks:read

Adrese okruženja vašeg kredencijala, sa stanjem (uključena ili isključena i zašto), poslednjim uspehom i neuspehom i podatkom ko ih je dodao. Uklonjene adrese se ne prikazuju.

GET/v1/webhook-endpoints

curl -X GET "https://api.bokapos.rs/v1/webhook-endpoints" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

200OK

{
  "items": [
    {
      "id": "287978af-8d23-4e51-8c51-59d60c5fb9c3",
      "environment": "sandbox",
      "url": "https://shop.example.com/bokapos/webhooks",
      "description": "Web shop: status porudžbina",
      "eventTypes": [
        "fiscal-document.fiscalized",
        "fiscal-document.outcome-unknown",
        "receipt-delivery.failed"
      ],
      "enabled": true,
      "status": "enabled",
      "disabledReason": null,
      "failingSince": null,
      "lastSuccessAt": "2026-11-02T09:14:04.120Z",
      "lastFailureAt": null,
      "createdBy": {
        "kind": "api-credential",
        "name": null
      },
      "createdAt": "2026-11-02T09:00:00.000Z",
      "updatedAt": "2026-11-02T09:14:04.120Z"
    }
  ]
}

Beleške iz ugovora (OpenAPI, engleski)

A machine credential sees the endpoints of its own environment. A customer Owner or Administrator sees both environments unless the organization hides its sandbox data. Deleted endpoints are not listed.

Odgovori

listWebhookEndpoints: Odgovori
200OK	Webhook endpoints`WebhookEndpointList`

Odgovor: WebhookEndpointList

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

listWebhookEndpoints: Odgovor
Polje	Opis
`items`obaveznoTip: array<WebhookEndpoint>
`id`obaveznoTip: uuid
`environment`obaveznoTip: string	Vrednosti`sandboxproduction`
`url`obaveznoTip: uri	max 2048
`description`obaveznoTip: string \| null (može biti null)	max 200
`eventTypes`obaveznoTip: array<WebhookEventType>	Vrednosti`fiscal-document.fiscalizedfiscal-document.outcome-unknownreceipt-delivery.deliveredreceipt-delivery.failedsecurity-element.activatedsecurity-element.suspendedsecurity-element.retiredsecurity-element.expiringlicense.updated`min 1 items
`enabled`obaveznoTip: boolean
`status`obaveznoTip: string	Vrednosti`enableddisabled`
`disabledReason`obaveznoTip: string \| null (može biti null)	failing means 72 hours of failed deliveries without a single success; revoked means the API key or AI connection that registered the endpoint was revoked, or the AI connection lost its webhooks permission. `PUT` with `enabled: true` switches it back on. Vrednosti`manualfailingrevoked`
`failingSince`obaveznoTip: date-time \| null (može biti null)
`lastSuccessAt`obaveznoTip: date-time \| null (može biti null)
`lastFailureAt`obaveznoTip: date-time \| null (može biti null)
`createdBy`obaveznoTip: object	Who registered the endpoint. The name is returned to Owners and Administrators only, never to a machine credential.
`kind`obaveznoTip: string	Vrednosti`personapi-credentialai-connectionunknown`
`name`obaveznoTip: string \| null (može biti null)	max 200
`createdAt`obaveznoTip: date-time
`updatedAt`obaveznoTip: date-time

Dodaj webhook adresu

post/v1/webhook-endpoints

Scopewebhooks:write

Registruje javnu HTTPS adresu i tipove događaja koje prima. Kredencijal uvek registruje u svom okruženju, pa `environment` može da izostavi. Isti `url` u istom okruženju postoji samo jednom (`409` vraća postojeću adresu), a organizacija ima najviše deset adresa po okruženju.

POST/v1/webhook-endpoints

curl -X POST "https://api.bokapos.rs/v1/webhook-endpoints" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "url": "https://shop.example.com/bokapos/webhooks",
  "description": "Web shop: status porudžbina",
  "eventTypes": [
    "fiscal-document.fiscalized",
    "fiscal-document.outcome-unknown",
    "receipt-delivery.failed"
  ]
}'

{
  "id": "287978af-8d23-4e51-8c51-59d60c5fb9c3",
  "environment": "sandbox",
  "url": "https://shop.example.com/bokapos/webhooks",
  "description": "Web shop: status porudžbina",
  "eventTypes": [
    "fiscal-document.fiscalized",
    "fiscal-document.outcome-unknown",
    "receipt-delivery.failed"
  ],
  "enabled": true,
  "status": "enabled",
  "disabledReason": null,
  "failingSince": null,
  "lastSuccessAt": null,
  "lastFailureAt": null,
  "createdBy": {
    "kind": "api-credential",
    "name": null
  },
  "createdAt": "2026-11-02T09:00:00.000Z",
  "updatedAt": "2026-11-02T09:00:00.000Z"
}

Kredencijal ne šalje environment: adresa uvek pripada njegovom okruženju. createdBy.name je null jer ime autora vide samo ljudi u portalu.

Beleške iz ugovora (OpenAPI, engleski)

The URL must be absolute https without user information or a fragment and must resolve to a public address; it is checked again at every connection. A machine credential registers in its own environment and may omit `environment`; a human must name it. One live endpoint per URL and environment: registering the same URL again answers 409 with the existing `webhookEndpointId`. At most ten endpoints per organization and environment. Free in the base licence.

Telo zahtevaapplication/json

createWebhookEndpoint: Telo zahteva
Polje	Opis
`url`obaveznoTip: uri	max 2048
`description`opcionoTip: string \| null (može biti null)	max 200
`eventTypes`obaveznoTip: array<WebhookEventType>	Vrednosti`fiscal-document.fiscalizedfiscal-document.outcome-unknownreceipt-delivery.deliveredreceipt-delivery.failedsecurity-element.activatedsecurity-element.suspendedsecurity-element.retiredsecurity-element.expiringlicense.updated`min 1 items
`environment`opcionoTip: string \| null (može biti null)	Required for humans; a machine credential may omit it and always uses its own environment. Vrednosti`sandboxproduction`

Odgovori

createWebhookEndpoint: Odgovori
201Created	Endpoint created`WebhookEndpoint`
409Conflict	The URL is already registered in this environment, or the endpoint limit is reached`WebhookEndpointConflict`
422Unprocessable Content	The command violates a Boka or fiscal rule`ErrorCode`

Odgovor: WebhookEndpoint

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

createWebhookEndpoint: Odgovor
Polje	Opis
`id`obaveznoTip: uuid
`environment`obaveznoTip: string	Vrednosti`sandboxproduction`
`url`obaveznoTip: uri	max 2048
`description`obaveznoTip: string \| null (može biti null)	max 200
`eventTypes`obaveznoTip: array<WebhookEventType>	Vrednosti`fiscal-document.fiscalizedfiscal-document.outcome-unknownreceipt-delivery.deliveredreceipt-delivery.failedsecurity-element.activatedsecurity-element.suspendedsecurity-element.retiredsecurity-element.expiringlicense.updated`min 1 items
`enabled`obaveznoTip: boolean
`status`obaveznoTip: string	Vrednosti`enableddisabled`
`disabledReason`obaveznoTip: string \| null (može biti null)	failing means 72 hours of failed deliveries without a single success; revoked means the API key or AI connection that registered the endpoint was revoked, or the AI connection lost its webhooks permission. `PUT` with `enabled: true` switches it back on. Vrednosti`manualfailingrevoked`
`failingSince`obaveznoTip: date-time \| null (može biti null)
`lastSuccessAt`obaveznoTip: date-time \| null (može biti null)
`lastFailureAt`obaveznoTip: date-time \| null (može biti null)
`createdBy`obaveznoTip: object	Who registered the endpoint. The name is returned to Owners and Administrators only, never to a machine credential.
`kind`obaveznoTip: string	Vrednosti`personapi-credentialai-connectionunknown`
`name`obaveznoTip: string \| null (može biti null)	max 200
`createdAt`obaveznoTip: date-time
`updatedAt`obaveznoTip: date-time

Pročitaj webhook adresu

get/v1/webhook-endpoints/{webhookEndpointId}

Scopewebhooks:read

Jedna adresa po identifikatoru, isti skup polja kao lista.

GET/v1/webhook-endpoints/{webhookEndpointId}

curl -X GET "https://api.bokapos.rs/v1/webhook-endpoints/287978af-8d23-4e51-8c51-59d60c5fb9c3" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

200OK

{
  "id": "287978af-8d23-4e51-8c51-59d60c5fb9c3",
  "environment": "sandbox",
  "url": "https://shop.example.com/bokapos/webhooks",
  "description": "Web shop: status porudžbina",
  "eventTypes": [
    "fiscal-document.fiscalized",
    "fiscal-document.outcome-unknown",
    "receipt-delivery.failed"
  ],
  "enabled": true,
  "status": "enabled",
  "disabledReason": null,
  "failingSince": null,
  "lastSuccessAt": "2026-11-02T09:14:04.120Z",
  "lastFailureAt": null,
  "createdBy": {
    "kind": "api-credential",
    "name": null
  },
  "createdAt": "2026-11-02T09:00:00.000Z",
  "updatedAt": "2026-11-02T09:14:04.120Z"
}

Parametri

getWebhookEndpoint: Parametri
Polje	Opis
`webhookEndpointId`obaveznoGde: pathTip: uuid

Odgovori

getWebhookEndpoint: Odgovori
200OK	Webhook endpoint`WebhookEndpoint`
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`

Odgovor: WebhookEndpoint

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

getWebhookEndpoint: Odgovor
Polje	Opis
`id`obaveznoTip: uuid
`environment`obaveznoTip: string	Vrednosti`sandboxproduction`
`url`obaveznoTip: uri	max 2048
`description`obaveznoTip: string \| null (može biti null)	max 200
`eventTypes`obaveznoTip: array<WebhookEventType>	Vrednosti`fiscal-document.fiscalizedfiscal-document.outcome-unknownreceipt-delivery.deliveredreceipt-delivery.failedsecurity-element.activatedsecurity-element.suspendedsecurity-element.retiredsecurity-element.expiringlicense.updated`min 1 items
`enabled`obaveznoTip: boolean
`status`obaveznoTip: string	Vrednosti`enableddisabled`
`disabledReason`obaveznoTip: string \| null (može biti null)	failing means 72 hours of failed deliveries without a single success; revoked means the API key or AI connection that registered the endpoint was revoked, or the AI connection lost its webhooks permission. `PUT` with `enabled: true` switches it back on. Vrednosti`manualfailingrevoked`
`failingSince`obaveznoTip: date-time \| null (može biti null)
`lastSuccessAt`obaveznoTip: date-time \| null (može biti null)
`lastFailureAt`obaveznoTip: date-time \| null (može biti null)
`createdBy`obaveznoTip: object	Who registered the endpoint. The name is returned to Owners and Administrators only, never to a machine credential.
`kind`obaveznoTip: string	Vrednosti`personapi-credentialai-connectionunknown`
`name`obaveznoTip: string \| null (može biti null)	max 200
`createdAt`obaveznoTip: date-time
`updatedAt`obaveznoTip: date-time

Izmeni webhook adresu

put/v1/webhook-endpoints/{webhookEndpointId}

Scopewebhooks:write

Zamenjuje `url`, `description`, `eventTypes` i `enabled` odjednom; okruženje se ne menja. Sa `enabled: true` ponovo uključuje adresu koja je isključena ručno, posle 72 sata neuspešnih isporuka ili opozivom kredencijala koji ju je dodao. Ako je zapis u međuvremenu promenjen, `409 WEBHOOK_ENDPOINT_CHANGED` traži da ga pročitate ponovo.

PUT/v1/webhook-endpoints/{webhookEndpointId}

curl -X PUT "https://api.bokapos.rs/v1/webhook-endpoints/287978af-8d23-4e51-8c51-59d60c5fb9c3" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "url": "https://shop.example.com/bokapos/webhooks",
  "description": "Web shop: status porudžbina i e-pošte",
  "eventTypes": [
    "fiscal-document.fiscalized",
    "fiscal-document.outcome-unknown",
    "receipt-delivery.delivered",
    "receipt-delivery.failed"
  ],
  "enabled": true
}'

{
  "id": "287978af-8d23-4e51-8c51-59d60c5fb9c3",
  "environment": "sandbox",
  "url": "https://shop.example.com/bokapos/webhooks",
  "description": "Web shop: status porudžbina i e-pošte",
  "eventTypes": [
    "fiscal-document.fiscalized",
    "fiscal-document.outcome-unknown",
    "receipt-delivery.delivered",
    "receipt-delivery.failed"
  ],
  "enabled": true,
  "status": "enabled",
  "disabledReason": null,
  "failingSince": null,
  "lastSuccessAt": "2026-11-02T09:14:04.120Z",
  "lastFailureAt": null,
  "createdBy": {
    "kind": "api-credential",
    "name": null
  },
  "createdAt": "2026-11-02T09:00:00.000Z",
  "updatedAt": "2026-11-02T11:30:00.000Z"
}

Beleške iz ugovora (OpenAPI, engleski)

`enabled: true` re-enables an endpoint that was switched off by hand or after 72 hours of failed deliveries; delivery resumes with new events. The environment never changes.

Parametri

putWebhookEndpoint: Parametri
Polje	Opis
`webhookEndpointId`obaveznoGde: pathTip: uuid

Telo zahtevaapplication/json

putWebhookEndpoint: Telo zahteva
Polje	Opis
`url`obaveznoTip: uri	max 2048
`description`opcionoTip: string \| null (može biti null)	max 200
`eventTypes`obaveznoTip: array<WebhookEventType>	Vrednosti`fiscal-document.fiscalizedfiscal-document.outcome-unknownreceipt-delivery.deliveredreceipt-delivery.failedsecurity-element.activatedsecurity-element.suspendedsecurity-element.retiredsecurity-element.expiringlicense.updated`min 1 items
`enabled`obaveznoTip: boolean

Odgovori

putWebhookEndpoint: Odgovori
200OK	Updated endpoint`WebhookEndpoint`
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`
409Conflict	`WEBHOOK_ENDPOINT_URL_EXISTS` when another endpoint of this environment already uses the URL; `WEBHOOK_ENDPOINT_CHANGED` when the endpoint changed meanwhile (a delivery result is recorded on it after every attempt): read it again and repeat the change.`Conflict`
422Unprocessable Content	The command violates a Boka or fiscal rule`ErrorCode`

Odgovor: WebhookEndpoint

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

putWebhookEndpoint: Odgovor
Polje	Opis
`id`obaveznoTip: uuid
`environment`obaveznoTip: string	Vrednosti`sandboxproduction`
`url`obaveznoTip: uri	max 2048
`description`obaveznoTip: string \| null (može biti null)	max 200
`eventTypes`obaveznoTip: array<WebhookEventType>	Vrednosti`fiscal-document.fiscalizedfiscal-document.outcome-unknownreceipt-delivery.deliveredreceipt-delivery.failedsecurity-element.activatedsecurity-element.suspendedsecurity-element.retiredsecurity-element.expiringlicense.updated`min 1 items
`enabled`obaveznoTip: boolean
`status`obaveznoTip: string	Vrednosti`enableddisabled`
`disabledReason`obaveznoTip: string \| null (može biti null)	failing means 72 hours of failed deliveries without a single success; revoked means the API key or AI connection that registered the endpoint was revoked, or the AI connection lost its webhooks permission. `PUT` with `enabled: true` switches it back on. Vrednosti`manualfailingrevoked`
`failingSince`obaveznoTip: date-time \| null (može biti null)
`lastSuccessAt`obaveznoTip: date-time \| null (može biti null)
`lastFailureAt`obaveznoTip: date-time \| null (može biti null)
`createdBy`obaveznoTip: object	Who registered the endpoint. The name is returned to Owners and Administrators only, never to a machine credential.
`kind`obaveznoTip: string	Vrednosti`personapi-credentialai-connectionunknown`
`name`obaveznoTip: string \| null (može biti null)	max 200
`createdAt`obaveznoTip: date-time
`updatedAt`obaveznoTip: date-time

Ukloni webhook adresu

delete/v1/webhook-endpoints/{webhookEndpointId}

Scopewebhooks:write

Uklanja adresu i otkazuje njene isporuke na čekanju. Odgovor je `204` bez tela; `409 WEBHOOK_ENDPOINT_CHANGED` znači da treba pročitati adresu i ponoviti uklanjanje.

DELETE/v1/webhook-endpoints/{webhookEndpointId}

curl -X DELETE "https://api.bokapos.rs/v1/webhook-endpoints/287978af-8d23-4e51-8c51-59d60c5fb9c3" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

204No Content

Prazno telo. Isporuke na čekanju su otkazane.

Beleške iz ugovora (OpenAPI, engleski)

Pending deliveries are cancelled; the delivery history is kept.

Parametri

deleteWebhookEndpoint: Parametri
Polje	Opis
`webhookEndpointId`obaveznoGde: pathTip: uuid

Odgovori

deleteWebhookEndpoint: Odgovori
204No Content	Endpoint removed
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`
409Conflict	`WEBHOOK_ENDPOINT_CHANGED`: the endpoint changed meanwhile; read it again and repeat the removal.`Conflict`

Odgovor: ErrorCode

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

deleteWebhookEndpoint: Odgovor
Polje	Opis
`code`obaveznoTip: string
`message`opcionoTip: string

Istorija isporuka

get/v1/webhook-endpoints/{webhookEndpointId}/deliveries

Scopewebhooks:read

Poslednjih 100 isporuka ka adresi, najnovije prve, sa brojem pokušaja, sledećim pokušajem i ishodom poslednjeg (`lastStatusCode`, `lastFailureCode`).

GET/v1/webhook-endpoints/{webhookEndpointId}/deliveries

curl -X GET "https://api.bokapos.rs/v1/webhook-endpoints/287978af-8d23-4e51-8c51-59d60c5fb9c3/deliveries" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

200OK

{
  "items": [
    {
      "id": "4b6f2c1e-8a3d-4f5b-9c7e-1d2a3b4c5d6e",
      "eventId": "5c7a3d2f-9b4e-4a6c-8d1f-2e3b4c5d6e7f",
      "eventType": "receipt-delivery.failed",
      "status": "pending",
      "attempts": 2,
      "nextAttemptAt": "2026-11-02T09:41:20.000Z",
      "lastAttemptAt": "2026-11-02T09:36:20.000Z",
      "lastStatusCode": 502,
      "lastFailureCode": "HTTP_STATUS",
      "createdAt": "2026-11-02T09:35:19.800Z",
      "updatedAt": "2026-11-02T09:36:20.000Z"
    },
    {
      "id": "9fbe86a6-4d6a-4529-b162-ccacc98771a5",
      "eventId": "21c0738c-e29c-480f-92a9-fb88a99dc514",
      "eventType": "fiscal-document.fiscalized",
      "status": "succeeded",
      "attempts": 1,
      "nextAttemptAt": null,
      "lastAttemptAt": "2026-11-02T09:14:04.120Z",
      "lastStatusCode": 200,
      "lastFailureCode": null,
      "createdAt": "2026-11-02T09:14:03.640Z",
      "updatedAt": "2026-11-02T09:14:04.120Z"
    }
  ]
}

Prva isporuka je dva puta dobila 502 i čeka sledeći pokušaj; druga je uspela iz prvog pokušaja.

Parametri

listWebhookDeliveries: Parametri
Polje	Opis
`webhookEndpointId`obaveznoGde: pathTip: uuid

Odgovori

listWebhookDeliveries: Odgovori
200OK	Deliveries`WebhookDeliveryList`
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`

Odgovor: WebhookDeliveryList

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

listWebhookDeliveries: Odgovor
Polje	Opis
`items`obaveznoTip: array<WebhookDelivery>
`id`obaveznoTip: uuid
`eventId`obaveznoTip: uuid
`eventType`obaveznoTip: string
`status`obaveznoTip: string	Vrednosti`pendingsendingsucceededfailedcancelled`
`attempts`obaveznoTip: integer	>= 0
`nextAttemptAt`obaveznoTip: date-time \| null (može biti null)
`lastAttemptAt`obaveznoTip: date-time \| null (može biti null)
`lastStatusCode`obaveznoTip: integer \| null (može biti null)
`lastFailureCode`obaveznoTip: string \| null (može biti null)	Vrednosti`HTTP_STATUSREDIRECT_NOT_FOLLOWEDTIMEOUTCONNECTION_FAILEDDNS_FAILEDTLS_FAILEDTARGET_NOT_PUBLICINVALID_TARGET`
`createdAt`obaveznoTip: date-time
`updatedAt`obaveznoTip: date-time

Pošalji isporuku ponovo

post/v1/webhook-endpoints/{webhookEndpointId}/deliveries/{webhookDeliveryId}/resend

Scopewebhooks:write

Još jedan pokušaj odmah, van rasporeda ponavljanja, za uspelu, neuspelu ili otkazanu isporuku uključene adrese. Neuspelo ponovno slanje ne pokreće novu seriju pokušaja.

POST/v1/webhook-endpoints/{webhookEndpointId}/deliveries/{webhookDeliveryId}/resend

curl -X POST "https://api.bokapos.rs/v1/webhook-endpoints/287978af-8d23-4e51-8c51-59d60c5fb9c3/deliveries/9fbe86a6-4d6a-4529-b162-ccacc98771a5/resend" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

{
  "id": "9fbe86a6-4d6a-4529-b162-ccacc98771a5",
  "eventId": "21c0738c-e29c-480f-92a9-fb88a99dc514",
  "eventType": "fiscal-document.fiscalized",
  "status": "pending",
  "attempts": 1,
  "nextAttemptAt": "2026-11-02T12:00:00.000Z",
  "lastAttemptAt": "2026-11-02T09:14:04.120Z",
  "lastStatusCode": 200,
  "lastFailureCode": null,
  "createdAt": "2026-11-02T09:14:03.640Z",
  "updatedAt": "2026-11-02T12:00:00.000Z"
}

Beleške iz ugovora (OpenAPI, engleski)

Allowed for succeeded, failed and cancelled deliveries of an enabled endpoint. A failed resend does not start a new retry series.

Parametri

resendWebhookDelivery: Parametri
Polje	Opis
`webhookEndpointId`obaveznoGde: pathTip: uuid
`webhookDeliveryId`obaveznoGde: pathTip: uuid

Odgovori

resendWebhookDelivery: Odgovori
202Accepted	Delivery queued again`WebhookDelivery`
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`
409Conflict	`WEBHOOK_DELIVERY_IN_PROGRESS` while the delivery is still queued or sending, `WEBHOOK_ENDPOINT_DISABLED` when the endpoint is switched off, `WEBHOOK_DELIVERY_CHANGED` when the delivery changed meanwhile.`Conflict`

Odgovor: WebhookDelivery

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

resendWebhookDelivery: Odgovor
Polje	Opis
`id`obaveznoTip: uuid
`eventId`obaveznoTip: uuid
`eventType`obaveznoTip: string
`status`obaveznoTip: string	Vrednosti`pendingsendingsucceededfailedcancelled`
`attempts`obaveznoTip: integer	>= 0
`nextAttemptAt`obaveznoTip: date-time \| null (može biti null)
`lastAttemptAt`obaveznoTip: date-time \| null (može biti null)
`lastStatusCode`obaveznoTip: integer \| null (može biti null)
`lastFailureCode`obaveznoTip: string \| null (može biti null)	Vrednosti`HTTP_STATUSREDIRECT_NOT_FOLLOWEDTIMEOUTCONNECTION_FAILEDDNS_FAILEDTLS_FAILEDTARGET_NOT_PUBLICINVALID_TARGET`
`createdAt`obaveznoTip: date-time
`updatedAt`obaveznoTip: date-time

Pošalji probni događaj

post/v1/webhook-endpoints/{webhookEndpointId}/test-events

Scopewebhooks:write

Stavlja u red jedan `webhook-endpoint.test` događaj samo za ovu adresu, potpisan kao svaki drugi. Ne pojavljuje se u toku događaja i ne ide drugim adresama. Adresa mora biti uključena.

POST/v1/webhook-endpoints/{webhookEndpointId}/test-events

curl -X POST "https://api.bokapos.rs/v1/webhook-endpoints/287978af-8d23-4e51-8c51-59d60c5fb9c3/test-events" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

{
  "eventId": "60e081b9-14f3-46e9-a26b-531436ddc947"
}

Adresa za trenutak dobija potpisan zahtev sa type: webhook-endpoint.test i data: { webhookEndpointId }; ishod vidite u istoriji isporuka.

Beleške iz ugovora (OpenAPI, engleski)

The test event is never shown in the event feed and never sent to another endpoint.

Parametri

createWebhookTestEvent: Parametri
Polje	Opis
`webhookEndpointId`obaveznoGde: pathTip: uuid

Odgovori

createWebhookTestEvent: Odgovori
202Accepted	Test event queued`WebhookTestEvent`
404Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`
409Conflict	The endpoint is disabled`Conflict`

Odgovor: WebhookTestEvent

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

createWebhookTestEvent: Odgovor
Polje	Opis
`eventId`obaveznoTip: uuid

Javni ključevi za potpis

get/v1/webhook-signing-keys

Scopewebhooks:read

Javni Ed25519 ključevi kojima proveravate potpis svakog webhook zahteva. Verujte svakom ključu sa liste: tokom zamene ključa lista ima dva, a svaka isporuka nosi po jedan potpis za svaki.

GET/v1/webhook-signing-keys

curl -X GET "https://api.bokapos.rs/v1/webhook-signing-keys" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

200OK

{
  "items": [
    {
      "id": "boka-2026-11",
      "algorithm": "ed25519",
      "publicKey": "whpk_tmKJ87mlOVyUIvJCGkDR/3Sndc35HZH6fQRJwdH/FO4="
    }
  ]
}

Ključ u primeru je izmišljen; pravi ključ pročitajte iz odgovora. Isti ključ važi za sandbox i produkciju.

Beleške iz ugovora (OpenAPI, engleski)

Trust every listed key. During a rotation two keys are listed and every delivery carries one signature per key.

Odgovori

listWebhookSigningKeys: Odgovori
200OK	Active public keys`WebhookSigningKeyList`

Odgovor: WebhookSigningKeyList

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

listWebhookSigningKeys: Odgovor
Polje	Opis
`items`obaveznoTip: array<WebhookSigningKey>
`id`obaveznoTip: string
`algorithm`obaveznoTip: const "ed25519"
`publicKey`obaveznoTip: string	Standard Webhooks public key, whpk_ followed by the base64 raw 32-byte Ed25519 key. pattern ^whpk_[A-Za-z0-9+/]{43}=$