Replay committed CRM events at-or-after since

GET /events

Replay committed CRM events at-or-after since (a journal sequence number), oldest first — exactly as the journal holds them, so a person's profile is the sealed string, never the details (read those from /people).

One response is a page: limit defaults to 500 and is capped at 5000 (an over-cap request is clamped). Pages are sequence-ordered and the boundary is stable — repeat with since=<last event's sequence + 1> until a page comes back smaller than limit to replay the journal exactly once. upTo (inclusive) ends the replay at a sequence instead of the journal's head — with GET /events/head it replays the journal as it stood at a moment. Appends nothing: a read of facts already journalled.

Access

Requires customers:read or companies:read.

Any one of these scopes is enough.

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

AI agent tool

No agent tool. The journal replay a consumer pages through to build its projection; agents read the projections the list and get tools serve, and the audit trail (audit_trail) for history.

Connecting an agent: AI agents.

Example

curl

curl -X GET 'https://crm.getmanifold.io/events?since=41&limit=500' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN"

JavaScript (fetch)

const response = await fetch("https://crm.getmanifold.io/events?since=41&limit=500", {
  method: "GET",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}` },
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();

Response · 200 · application/json

[
  {
    "_tag": "crm.person-created",
    "eventId": "evt_01a1588a-0c41-7d2e-9a10-000000000041",
    "txId": "tx_01a1588a-0c41-7d2e-9a10-000000000041",
    "tenantId": "org_01a1586e-f9f6-7a8b-9c7d-6e5f4a3b2c1d",
    "sequence": 41,
    "occurredAt": "2026-10-20T09:00:00.000Z",
    "source": "crm-manager",
    "version": 1,
    "actor": {
      "_tag": "user",
      "id": "usr_01a15889-fa80-7b11-8c22-3d4e5f6a7b8c"
    },
    "correlationId": "req_01a1588a-0c41-7d2e-9a10-000000000041",
    "payload": {
      "reference": "checkout:5521",
      "personId": "psn_01a1588a-0c41-7d2e-9a10-3b5c6d7e8f90",
      "emailKey": "593c82fc1f2944d758cdd3ba99d3846467ec3417f394e5f47c7410b939a0a83c",
      "profile": "v1.QmFzZTY0IGNpcGhlcnRleHQgb2YgdGhlIHByb2ZpbGU=",
      "tags": [
        "trade"
      ],
      "roles": [
        "customer"
      ],
      "taxExempt": false,
      "emailMarketing": "subscribed",
      "smsMarketing": "not-subscribed"
    }
  },
  {
    "_tag": "crm.company-contact-set",
    "eventId": "evt_01a1588a-0c41-7d2e-9a10-000000000042",
    "txId": "tx_01a1588a-0c41-7d2e-9a10-000000000042",
    "tenantId": "org_01a1586e-f9f6-7a8b-9c7d-6e5f4a3b2c1d",
    "sequence": 42,
    "occurredAt": "2026-10-20T09:06:00.000Z",
    "source": "crm-manager",
    "version": 1,
    "actor": {
      "_tag": "user",
      "id": "usr_01a15889-fa80-7b11-8c22-3d4e5f6a7b8c"
    },
    "correlationId": "req_01a1588a-0c41-7d2e-9a10-000000000042",
    "payload": {
      "companyId": "cmp_01a1588a-1f02-7a3b-8c4d-5e6f7a8b9c0d",
      "personId": "psn_01a1588a-0c41-7d2e-9a10-3b5c6d7e8f90",
      "title": "Purchasing manager",
      "main": true
    }
  }
]

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: crm-manager.openapi.json. Base URL https://crm.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.

`401`

Refusal	What it means	What to do
`Unauthorized` reason	The token is missing, expired or not one Manifold issued.	Get a fresh token and send the call again.
`TokenAlreadyUsed` tokenId	A single-use app token was already spent.	Mint a new token for this call.

`402`

Refusal	What it means	What to do
`SubscriptionRequired` status	The organization's subscription has lapsed, so writes are refused.	An owner settles billing. Reads still work meanwhile.

`403`

Refusal	What it means	What to do
`TenantRequired` userId	The token names no organization.	Choose the organization, then get a new token.
`ScopeRequired` required	The token's roles do not grant the scope this call needs.	Ask an owner or admin for a role that grants it.

`409`

Refusal	What it means	What to do
`MirroredFromSource` source	This area is fed by your source system until the organization goes live.	Make the change in the source system, or go live first.

`503`

Refusal	What it means	What to do
`RequestLogUnavailable` tokenId, reason	The service could not record the request, so it did nothing.	Try again shortly.

How refusals work everywhere: Errors.