The app catalogue: every app an organization may install

GET /api/auth/apps

The app catalogue: every app an organization may install — Manifold's first-party apps until partner apps join it — with what each asks to be granted (scopes), whether it has a page of its own in the admin (embedded) and its App Store listing.

Access

Requires a signed-in session: Any signed-in person: the catalogue is the same for every organization and holds nothing of one

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

AI agent tool

No agent tool. The app catalogue is what Apps › Install in the admin and the App Store show a person deciding what to install; an agent has nothing to act on in it.

Connecting an agent: AI agents.

Example

Abridged to one app: the catalogue lists every app the platform offers.

curl

curl -X GET 'https://auth.getmanifold.io/api/auth/apps' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN"

JavaScript (fetch)

const response = await fetch("https://auth.getmanifold.io/api/auth/apps", {
  method: "GET",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}` },
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();

Response · 200 · application/json

{
  "apps": [
    {
      "id": "app_85cedb60-f616-4fe5-b9ea-dcd3689b4bc6",
      "handle": "xero",
      "name": "Xero",
      "description": "Keep Xero's books in step with Manifold: the general ledger pushed as manual journals, reconciled to the trial balance.",
      "developer": "manifold",
      "scopes": [
        "financials:read",
        "financials:write"
      ],
      "embedded": true,
      "redirectOrigins": [
        "https://login.xero.com"
      ],
      "listing": {
        "tagline": "Your Manifold ledger in Xero, journal by journal, reconciled to the cent.",
        "overview": [
          "Connect your Xero organisation and Manifold pushes its general ledger there as manual journals: sales invoices, payments and refunds, stock received, cost of sales and write-downs, each on the account you choose.",
          "Every posting reaches Xero once. The connector checks what it has sent against Manifold's trial balance, so a gap is found and filled rather than left for your bookkeeper."
        ],
        "features": [
          {
            "title": "Daily summaries or every posting",
            "body": "One journal per day with each account's totals, or one journal per posting — whichever your bookkeeper prefers."
          },
          {
            "title": "Your chart of accounts, from Xero",
            "body": "Manifold's chart follows Xero's: accounts come across when you connect and whenever you sync, and an account Manifold already had at the same code is kept by Xero from then on. Nothing in Manifold is deleted."
          },
          {
            "title": "Your chart, or ours",
            "body": "Map each Manifold account onto your Xero chart with suggestions, or let the connector create Manifold's accounts in Xero."
          },
          {
            "title": "Start where you choose",
            "body": "Push from a date of your choosing, or the whole ledger from your first sale."
          },
          {
            "title": "Reconciled",
            "body": "What reached Xero is checked against the trial balance, account by account."
          }
        ],
        "accent": "#13b5ea",
        "mark": {
          "path": "M12 0C5.373 0 0 5.373 0 12s5.373 12 12 12 12-5.373 12-12S18.627 0 12 0zm6.585 14.655c-1.485 0-2.69-1.206-2.69-2.689 0-1.485 1.207-2.691 2.69-2.691 1.485 0 2.69 1.207 2.69 2.691s-1.207 2.689-2.69 2.689zM7.53 14.644c-.099 0-.192-.041-.267-.116l-2.043-2.04-2.052 2.047c-.069.068-.16.108-.258.108-.202 0-.368-.166-.368-.368 0-.099.04-.191.111-.263l2.04-2.05-2.038-2.047c-.075-.069-.113-.162-.113-.261 0-.203.166-.366.368-.366.098 0 .188.037.258.105l2.055 2.048 2.048-2.045c.069-.071.162-.108.26-.108.211 0 .375.165.375.366 0 .098-.029.188-.104.258l-2.056 2.055 2.055 2.051c.068.069.104.16.104.258 0 .202-.165.368-.365.368h-.01zm8.017-4.591c-.796.101-.882.476-.882 1.404v2.787c0 .202-.165.366-.366.366-.203 0-.367-.165-.368-.366v-4.53c0-.204.16-.366.362-.366.166 0 .316.125.346.289.27-.209.6-.317.93-.317h.105c.195 0 .359.165.359.368 0 .201-.164.352-.375.359 0 0-.09 0-.164.008l.053-.002zm-3.091 2.205H8.625c0 .019.003.037.006.057.02.105.045.211.083.31.194.531.765 1.275 1.829 1.29.33-.003.631-.086.9-.229.21-.12.391-.271.525-.428.045-.058.09-.112.12-.168.18-.229.405-.186.54-.083.164.135.18.391.045.57l-.016.016c-.21.27-.435.495-.689.66-.255.164-.525.284-.811.345-.33.09-.645.104-.975.06-1.095-.135-2.01-.93-2.28-2.01-.06-.21-.09-.42-.09-.645 0-.855.421-1.695 1.125-2.205.885-.615 2.085-.66 3-.075.63.405 1.035 1.021 1.185 1.771.075.419-.21.794-.734.81l.068-.046zm6.129-2.223c-1.064 0-1.931.865-1.931 1.931 0 1.064.866 1.931 1.931 1.931s1.931-.867 1.931-1.931c0-1.065-.866-1.933-1.931-1.933v.002zm0 2.595c-.367 0-.666-.297-.666-.666 0-.367.3-.665.666-.665.367 0 .667.299.667.665 0 .369-.3.667-.667.666zm-8.04-2.603c-.91 0-1.672.623-1.886 1.466v.03h3.776c-.203-.855-.973-1.494-1.891-1.494v-.002z",
          "viewBox": "0 0 24 24"
        },
        "setupPath": "/apps/xero"
      },
      "onboarding": {
        "path": "/onboarding",
        "role": "accounting",
        "title": "Set up Xero",
        "summary": "Connect your Xero organisation, place Manifold's accounts on your Xero chart, and choose how the ledger is sent."
      }
    }
  ]
}

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: auth-service.openapi.json. Base URL https://auth.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.

`401`

Refusal	What it means	What to do
`Unauthorized` reason	The token is missing, expired or not one Manifold issued.	Get a fresh token and send the call again.
`TokenAlreadyUsed` tokenId	A single-use app token was already spent.	Mint a new token for this call.

`402`

Refusal	What it means	What to do
`SubscriptionRequired` status	The organization's subscription has lapsed, so writes are refused.	An owner settles billing. Reads still work meanwhile.

`403`

Refusal	What it means	What to do
`TenantRequired` userId	The token names no organization.	Choose the organization, then get a new token.
`ScopeRequired` required	The token's roles do not grant the scope this call needs.	Ask an owner or admin for a role that grants it.

`409`

Refusal	What it means	What to do
`MirroredFromSource` source	This area is fed by your source system until the organization goes live.	Make the change in the source system, or go live first.

`503`

Refusal	What it means	What to do
`RequestLogUnavailable` tokenId, reason	The service could not record the request, so it did nothing.	Try again shortly.

How refusals work everywhere: Errors.