Skip to content

Create a RFQ invitation

Procurement module

POST/rfq-invitationsrfqInvitations.create

An invitation to bid on an RFQ. Creates a RFQ invitation. Requires `Idempotency-Key`; a replay returns the original response. The organization is derived from the credential or the parent row, never from the body.

  • Requires the capability procurement.rfq.write.
  • OAuth scopes: procurement.
  • Send an Idempotency-Key header. A replay with the same key returns the original response.
  • Error statuses: 400, 401, 409, 422, 429. Errors are RFC 9457 problem details.

Request body: RfqInvitationCreate

rfqInvitations.create: RfqInvitationCreate
FieldTypeRequiredDescription
rfq_idstring (uuid)YesIdentifier of the RFQ.
vendor_idstring (uuid)YesIdentifier of the invited vendor of the same org.
{
  "rfq_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "vendor_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"
}

Response 201: RfqInvitation

rfqInvitations.create: RfqInvitation
FieldTypeRequiredDescription
idstring (uuid)YesIdentifier of the rfq invitation.
org_idstring (uuid)YesIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)YesWhen the row was created.
created_bystring (uuid) | nullYesIdentifier of the person who created the row; null when a seed, platform or system process created it.
updated_atstring (date-time)YesWhen the row was last updated.
updated_bystring (uuid) | nullYesIdentifier of the person who last updated the row; null when a seed, platform or system process updated it.
rfq_idstring (uuid)YesIdentifier of the RFQ.
vendor_idstring (uuid)YesIdentifier of the invited vendor of the same org.
{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "rfq_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "vendor_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"
}

Code samples

curl -X POST "$XOS_BASE_URL/rfq-invitations" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"rfq_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","vendor_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"}'
const { data } = await xos.rfqInvitations.create({
    "rfq_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
    "vendor_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"
  });
response = xos.rfq_invitations.create({"rfq_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f", "vendor_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"})
xos rfq-invitations create --data '{"rfq_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","vendor_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"}'