Repository navigation
Reference Billing
Plans, checkout and the Stripe webhook (only with billing enabled).
Base path /api/v1/billing behind the gateway. Authentication, rate limits and the error format are the same for every service: see Scripting MowDeck. Rendered from apps/web/openapi/billing.json (OpenAPI 3.1), which you can also load into any OpenAPI tool.
Checkout
Start a hosted checkout for plan; redirect the browser to url.
422 when the plan is not sold here, 409 when the account already has a subscription (plan changes and cancellation happen in the customer portal).
Request body (required): application/json CheckoutIn
| Status | Meaning | Body |
|---|---|---|
| 200 | Successful Response |
application/json RedirectOut
|
| 422 | Validation Error |
application/json HTTPValidationError
|
Invoices
The newest invoices of the caller's account (links to the provider's pages).
| Status | Meaning | Body |
|---|---|---|
| 200 | Successful Response |
application/json array of InvoiceOut
|
Portal
Open the provider's customer portal (payment method, invoices, plan change, cancel).
404 before the account's first checkout.
| Status | Meaning | Body |
|---|---|---|
| 200 | Successful Response |
application/json RedirectOut
|
Status
Billing runs here: the provider, the currency and the plans on sale with prices.
Public (a pricing view needs no login). The web app probes it: a network error or 404 (the service is not deployed, billing is disabled) hides every billing element.
| Status | Meaning | Body |
|---|---|---|
| 200 | Successful Response |
application/json BillingStatusOut
|
Subscription
The subscription of the caller's account (subscription: null before checkout).
| Status | Meaning | Body |
|---|---|---|
| 200 | Successful Response |
application/json SubscriptionSummaryOut
|
Stripe Webhook
Stripe events. No token: only the Stripe-Signature over the raw body counts.
400 for an invalid signature, 200 for a handled or repeated event (each event id is processed once), 500 when handling failed (Stripe retries).
| Parameter | In | Type | Required | Notes |
|---|---|---|---|---|
stripe-signature |
header | string or null | no |
| Status | Meaning | Body |
|---|---|---|
| 200 | Successful Response |
application/json WebhookOut
|
| 422 | Validation Error |
application/json HTTPValidationError
|
GET /status: billing runs in this installation and what it sells.
The service only runs when billing is enabled, so a reachable endpoint always says enabled: true; the web app treats a network error or 404 as "billing disabled".
| Field | Type | Required | Notes |
|---|---|---|---|
automatic_tax |
boolean | yes | Stripe Tax calculates VAT in Checkout. |
currency |
string | yes | |
enabled |
boolean | no | default true
|
plans |
array of StatusPlanOut | yes | |
provider |
string | yes |
Body of POST /checkout.
| Field | Type | Required | Notes |
|---|---|---|---|
plan |
string | yes | pattern ^[a-z][a-z0-9_-]{0,63}$
|
| Field | Type | Required | Notes |
|---|---|---|---|
detail |
array of ValidationError | no |
An invoice reference; the document itself stays at the provider.
| Field | Type | Required | Notes |
|---|---|---|---|
amount_due |
integer | yes | Cents. |
amount_paid |
integer | yes | Cents. |
currency |
string | yes | |
hosted_url |
string or null | yes | |
issued_at |
string (date-time) | yes | |
number |
string or null | yes | |
pdf_url |
string or null | yes | |
status |
string | yes |
Status of an account's plan.
Type: "active" | "trial" | "grace" | "expired"
A provider price; amounts in the smallest currency unit (cents).
| Field | Type | Required | Notes |
|---|---|---|---|
currency |
string or null | yes | ISO 4217, lower case; null when not fetched. |
interval |
string or null | yes | day, week, month or year. |
interval_count |
integer or null | yes | |
price_id |
string | yes | |
unit_amount |
integer or null | yes | Amount per interval in cents. |
A provider page to send the browser to.
| Field | Type | Required | Notes |
|---|---|---|---|
url |
string | yes |
A plan on sale.
| Field | Type | Required | Notes |
|---|---|---|---|
description |
string or null | yes | |
key |
string | yes | |
name |
string or null | yes | From Entitlements; null when it is not reachable. |
price |
PriceOut | yes | |
trial_days |
integer | yes | Trial of a first subscription (from Entitlements). |
A subscription as the provider last reported it.
| Field | Type | Required | Notes |
|---|---|---|---|
cancel_at_period_end |
boolean | yes | |
current_period_end |
string (date-time) or null | yes | |
grace_until |
string (date-time) or null | yes | |
plan |
string or null | yes | |
plan_status |
PlanStatus or null | yes | What Billing set in Entitlements. |
status |
SubscriptionStatus | yes | |
trial_end |
string (date-time) or null | yes | |
updated_at |
string (date-time) | yes |
Status of a subscription at the payment provider (Stripe's values).
Type: "incomplete" | "incomplete_expired" | "trialing" | "active" | "past_due" | "canceled" | "unpaid" | "paused"
GET /subscription: the account's subscription (null before the first checkout).
| Field | Type | Required | Notes |
|---|---|---|---|
has_customer |
boolean | yes | The portal can be opened. |
provider |
string | yes | |
subscription |
SubscriptionOut or null | yes |
| Field | Type | Required | Notes |
|---|---|---|---|
ctx |
object | no | |
input |
any | no | |
loc |
array of string or integer | yes | |
msg |
string | yes | |
type |
string | yes |
Answer to the provider: received (and what it did, for the logs of the provider).
| Field | Type | Required | Notes |
|---|---|---|---|
duplicate |
boolean | yes | |
event_id |
string | yes | |
outcome |
string or null | yes | |
received |
boolean | no | default true
|
Mirrored from docs/reference/api/billing.md at commit 11a94afbcace55924c9675ef400e93c7785b4ac5. Edit the file in the repository, not this wiki page.
Mirrored from the docs/ directory at commit 11a94afbcace55924c9675ef400e93c7785b4ac5. Edit the files in the repository, not this wiki.
MowDeck documentation
- Home
- Phases
- Architecture
-
Decisions (ADR)
- Architecture decisions
- ADR 0001: OpenFGA instead of self-built authorization
- ADR 0002: Self-built Identity service in FastAPI instead of Keycloak or Zitadel
- ADR 0003: SvelteKit for the web app
- ADR 0004: Monorepo with a uv workspace
- ADR 0005: AGPL-3.0 for services and apps, Apache-2.0 for libraries
- ADR 0006: PostgreSQL for all persistence, no SQLite
- ADR 0007: NATS JetStream as event bus
- ADR 0008: Traefik as gateway
- ADR 0009: Command and event envelopes, subject naming and de-duplication
- ADR 0010: Python 3.13 for all services and libraries
- ADR 0011: Separate GPL-3.0 package for the PyMammotion adapter
- ADR 0012: Mower control interface and safety rules
- ADR 0013: Device-Gateway registry, sharding and per-mower concurrency
- ADR 0014: Authorization model, tuple ownership and the mowdeck-authz client
- ADR 0015: Tokens, sessions and key rotation
- ADR 0016: Fleet commands and authorization per command kind
- ADR 0017: Telemetry storage and retention
- ADR 0018: Realtime WebSocket protocol
- ADR 0019: Mammotion adapter transports, manual drive and secrets
- ADR 0020: Web app architecture
- ADR 0021: Browser authentication flow
- ADR 0022: Notifications: rules, recipients and delivery
- ADR 0023: Map rendering and projection
- ADR 0024: Scheduler: recurrence, rain pause and command issuing
- ADR 0025: Home Assistant integration as a pure API client
- ADR 0026: Manual drive channel over the Realtime WebSocket
- ADR 0027: Health history and theft alarm
- ADR 0028: Entitlements: plans as data and enforcement
- ADR 0029: Helm chart and release pipeline
- ADR 0030: Mowing patterns as plug-ins and the Planner
- ADR 0031: Billing with a Stripe adapter
- ADR 0032: Live camera over Agora, joined directly by the browser
- ADR 0033: Vision-assisted recovery with human approval
- ADR 0034: Linked cloud accounts and device discovery
- ADR 0035: Server-side camera frames and automatic AI analysis on errors
- ADR 0036: Native app shells with Capacitor, loading the web app from the server
- ADR 0037: Camera panorama calibration in the browser, with the AI supplying points only
- ADR 0038: Dual link per mower and firmware updates
- ADR 0039: Spot mowing by MowDeck-driven paths
- ADR 0040: Link heartbeat for online status
- ADR 0041: Spot runs from the dock: undock, transit and return
- ADR 0042: Drive calibration
- ADR 0043: Turn styles
- ADR 0044: Drive view with camera
- ADR 0045: Camera relay
- ADR 0046: Device settings as capabilities
- ADR 0047: The RTK base station as a Fleet device
- ADR 0048: Maintenance commands
- ADR 0049: Manual driving over the Mammotion cloud
- ADR 0050: Passkeys and the app login hand-off
- ADR 0051: Sign in with GitHub
- ADR 0052: Sign in with Apple
- ADR 0053: Retention and downsampling of the position track
- ADR 0054: Aerial photo under the mower map
- ADR 0055: Deploy maintenance window
- ADR 0056: Camera photo in push notifications for errors and theft alarms
- ADR 0057: Step-up re-authentication for critical actions
- ADR 0058: Theft tracking mode
- ADR 0059: iOS widgets and the mowing Live Activity
- ADR 0060: Apple Watch app
- ADR 0061: Mowing angle rotation
- ADR 0062: Setup tour for new users
- ADR 0063: Matter server (mowers in Apple Home and Google Home)
- ADR 0064: Personal access tokens and the public API documentation
- Development
-
Operations
- Operating the Compose stack
- Operating MowDeck on Kubernetes (Helm)
- Building the Bluetooth bridge (ESPHome on a XIAO ESP32-S3)
- Releases
- Billing operations
- Telemetry: retention and position downsampling
- iPhone and Android apps
- Passkeys
- Sign in with GitHub
- Aerial photo under the map
- Sign in with Apple
- Theft tracking mode
- Matter server
- Source code offer (AGPL-3.0 section 13)
- Spikes
- Guides
- API reference
- Original plan (German)