DocFila API

Quickstart

Upload a contract and send it for signature, with cURL:

# 1. Upload the document
curl -X POST https://api.docfila.com/v1/documents \
  -H "Authorization: Bearer sk_live_..." \
  -F file=@contract.pdf

# 2. Send it for signature (returns the envelope and its signing links)
curl -X POST https://api.docfila.com/v1/signatures/requests \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"documentId":"doc_123","signers":[{"email":"client@example.com","role":"signer"}]}'

# 3. Pull the completed evidence bundle when envelope.completed fires
curl https://api.docfila.com/v1/signatures/requests/$ID/evidence \
  -H "Authorization: Bearer sk_live_..."

Endpoints

📄 Documents

POST /v1/documents upload
GET /v1/documents list
GET /v1/documents/:id retrieve
GET /v1/documents/:id/download
DELETE /v1/documents/:id

☁️ Large uploads

POST /v1/documents/:id/upload-url resumable URL
POST /v1/documents/:id/uploads/complete
GET /v1/folders · POST /v1/folders

✍️ Signature envelopes

POST /v1/signatures/requests send
GET /v1/signatures/requests/:id status
POST /v1/signatures/requests/:id/remind
POST /v1/signatures/requests/:id/void · /correct · /reassign

🧾 Evidence & artifacts

GET /v1/signatures/requests/:id/evidence
GET /v1/signatures/requests/:id/artifacts/:artifact
POST /v1/signatures/requests/:id/embedded-session
POST /v1/signatures/workflows/sequential

🔐 Webhooks & keys

GET /v1/signatures/webhooks · POST · DELETE /:id
POST /v1/signatures/webhooks/:id/rotate-secret
POST /v1/api-keys · GET /v1/account

🏛️ Audit & export

GET /v1/documents/:id/audit-events
GET /v1/organization/audit-events
GET /v1/organization/members
POST /v1/export/datev · POST /v1/workflows/:id/run

Authentication

Bearer token in the Authorization header. Keys are organization-scoped and carry explicit permissions — documentsRead, signaturesWrite, auditRead and ten more — so a key can only reach what you granted it. Each key has its own per-minute request limit, and keys are created, scoped and revoked from Organization settings in the app.

curl https://api.docfila.com/v1/documents \
  -H "Authorization: Bearer sk_live_..." \
  -F file=@contract.pdf

Webhooks & events

Subscribe to envelope events: envelope.created, envelope.completed, envelope.declined, envelope.expired and envelope.voided. Every delivery is signed — x-docfila-signature: v1=<HMAC-SHA256 of timestamp.body> alongside x-docfila-timestamp, so you can verify the payload and reject replays. Failed deliveries retry with exponential backoff, capped at 6 hours between attempts, for up to 12 attempts before the event is marked failed. Rotate an endpoint’s secret at any time without recreating it.

Clients

OpenAPI 3.0

The full v1 surface is published as an OpenAPI 3.0 document — 26 paths, request and response schemas, and the scope each endpoint requires. Ask developers@docfila.com for the spec.

Generate your own client

Point openapi-generator or oapi-codegen at the spec and you have a typed client in TypeScript, Python, Go, Dart, Java or C# in one command.

Plain HTTP

Every endpoint is ordinary JSON over HTTPS with a bearer token, so cURL, fetch, requests or your language's standard HTTP client is enough — no dependency required.

Sandbox first

Create a scoped key limited to documentsRead, try it against your own workspace, then widen the scopes once the integration works.