Organization Settings

Names the credentials on file and what each is called. The secrets themselves are NEVER returned by this or any other endpoint — the asymmetry is deliberate: an operator must always be able to see WHICH credential a channel uses, and never needs to read it back. Rotation is writing a new value over the old one.

Stores the secret a channel's credentials_ref names, sealed at rest under the organization's own key. Writing the same reference again replaces the value, which is how rotation works. Keyed by reference and not by channel, because one access-point contract commonly serves several countries and a per-channel copy is a rotation somebody will do three quarters of. Returns 503 when the deployment has no secret keyring — refusing is the only honest answer, since the alternative is storing a credential in plaintext.

Deletes the stored secret. A channel that still names it then resolves to nothing, which is the loud state and not a silent empty one: the adapter reports the reference as unresolvable rather than sending unauthenticated.

Returns the channels this organization has configured — which access point or authority a document goes to for a given seller country, under which credentials reference, in test or live mode — together with the closed set of channel kinds the server supports. The kinds travel with the list because which transports exist is a server-side fact that changes with a release. credentials_ref is returned unmasked: it NAMES a secret in the secret store and is never the secret.

Creates one channel for a seller country (optionally narrowed to a region). The country is the SELLER's, because a channel is bought, paid for and credentialled by the seller. A second channel for the same country and region is refused with 409 — the unique index cannot catch it, because a nullable region makes two country-wide rows distinct in Postgres.

Replaces every field of one channel. A full replace and not a patch, because the endpoint, its credentials reference and the participant identifier addressed under them are one decision: a partial update that changed the endpoint and kept the old credentials reference would produce a channel that authenticates against nothing.

Deletes the row. Submissions already made through it are untouched: they are the record of what happened and are not the tenant's to erase. To stop using a channel without losing its settings, set is_enabled to false instead.

Returns the declaration RD 1007/2023 art. 13 obliges the producer of a Spanish sistema informático de facturación to issue «por escrito y de modo visible en el propio sistema informático en cada una de sus versiones»: who the producer is, which version of the system this is, the provisions the system declares compliance with, its tipología/composición/funcionalidades, and the limitations it declares. There is no state certification in Spain — it is self-declaration, and a false one is an LGT art. 201 bis infringement — so the limitations are part of the document rather than a footnote to it. The version is read from the running binary, because art. 13 makes the declaration per-version. The text is Spanish in every locale: it is a statement to a Spanish authority under a Spanish regulation, and a translated one is a different document.