Create and send a multi-document envelope
One request creates the envelope and queues preparation and delivery (send defaults to true). Accepts 1–20 documents, 50 MB each and 100 MB total; use contentBase64 for a single call (8 MiB of base64 per file, 16 MiB JSON request), or sourceSha256 from POST /source, or documentId from the Archive. Poll GET /envelopes/{id}: preparation moves queued → ready or failed; invitations only leave after successful preparation. format auto chooses CAdES when ANY file is not PDF. Explicit pades then returns 400; cades also works for PDFs and produces attached .p7m containers. CAdES needs the configured digest seal provider. Recipients default to role=signer and must list every envelope document key in documents. Every signer signs every file; partial assignments and sign:false return 400. Omit sign or use true. Existing envelopes retain their original assignments. Add role=cc for an informed recipient: omit documents (or []), keep otp=none and timestamp=false. They receive a read-only link on dispatch and a completed copy on the selected delivery channel; sendCopy is always enabled for cc. They cannot sign or decline, do not consume timestamps and do not block sequential routing or completion. At least one signer is required. PDF boxes use bottom-left PDF points, pages from 1: coordinates, default bottom-right last page, or tag (case-sensitive PDF text layer, occurrence from 1 and x/y offsets). Missing tags and out-of-page boxes fail preparation. Saved templates and custom signature images are not accepted. Each visible signature reads Digitally signed by followed by the signer name. Each signer chooses delivery=email|whatsapp and otp=none|email|whatsapp, independent of delivery. Select mailAccountId and whatsappAccountId to choose the sending account. Insufficient timestamp credits return 409 LIMIT_REACHED on creation; balances are rechecked at signing. timestamp=true applies one RFC3161 timestamp per envelope file and consumes included units first, then purchased units. PAdES adds a document timestamp immediately after the signer’s revision; CAdES timestamps the new CMS signature before co-signing. The web composer places boxes by dragging; the API additionally supports default and tag placement. API keys prepare and send; they never supply a person’s consent.
Request
- Base URL: https://api.custodo.ai
- URL: https://api.custodo.ai/api/v1/firme/envelopes
- Auth: HTTP bearer
Headers
The organisation to act in. An API key is bound to exactly one, so this is optional for a key and must match the one it was minted for.
Credential-scoped retry key: identical body returns 200 and Idempotent-Replayed:true; a changed body returns 409. The initial request returns 202.
Request body
Response
Idempotent replay.
Changes
No recorded changes to this operation across all 1 revision of this API.