The signed link a customer opens one of the order's documents by

POST /orders/{orderId}/links

The signed link a customer opens one of the order's documents by, on a page in the organization's brand: its quote, the order, an invoice (invoiceId) or a parcel's shipment (shipmentId).

Answers the link, its token and the page's url; with notificationId the token names the message carrying it, so opening it marks it opened. Appends fulfillment.customer-link-issued. 409 DocumentNotLinkable for a document the order does not have; 409 QuotesDisabled for a new quote link when quoteMode is draft-orders. Idempotent by state: a document has one live link, so a retry answers it, appending nothing.

Access

Requires orders:write or notifications:write.

Any one of these scopes is enough.

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

Retries

Idempotent by state: a document has one live link, so a retry answers it, appending nothing.

Why every write carries a key: Idempotency and retries.

Facts appended

fulfillment.customer-link-issued

What a fact is: Facts and the journal.

AI agent tool

Agents call this as fulfillment_issue_customer_link (Fulfillment: Issue customer link), in the notifications toolset.

Connecting an agent: AI agents.

Example

curl

curl -X POST 'https://fulfillment.getmanifold.io/orders/ord_01a15652-63f7-7a81-9b92-d8e9f0a1b2c3/links' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{
  "document": {
    "kind": "quote"
  }
}'

JavaScript (fetch)

const response = await fetch("https://fulfillment.getmanifold.io/orders/ord_01a15652-63f7-7a81-9b92-d8e9f0a1b2c3/links", {
  method: "POST",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}`, "Content-Type": "application/json" },
  body: JSON.stringify({
    "document": {
      "kind": "quote"
    }
  }),
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();

Request body · application/json

{
  "document": {
    "kind": "quote"
  }
}

Response · 200 · application/json

{
  "link": {
    "id": "cpl_01a15653-1a2b-7c3d-8e4f-5a6b7c8d9e0f",
    "document": {
      "kind": "quote"
    },
    "issuedAt": "2026-10-19T22:45:02.004Z",
    "issuedBy": {
      "_tag": "user",
      "id": "usr_01a15889-fa80-7b11-8c22-3d4e5f6a7b8c"
    }
  },
  "token": "01a1565263f77a819b92d8e9f0a1b2c3.01a156531a2b7c3d8e4f5a6b7c8d9e0f.q0W8rTz3mPd5LkXv2NfYbA",
  "url": "https://pages.getmanifold.io/org_01a1586e-f9f6-7a8b-9c7d-6e5f4a3b2c1d/01a1565263f77a819b92d8e9f0a1b2c3.01a156531a2b7c3d8e4f5a6b7c8d9e0f.q0W8rTz3mPd5LkXv2NfYbA"
}

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: fulfillment-manager.openapi.json. Base URL https://fulfillment.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.

`401`

Refusal	What it means	What to do
`Unauthorized` reason	The token is missing, expired or not one Manifold issued.	Get a fresh token and send the call again.
`TokenAlreadyUsed` tokenId	A single-use app token was already spent.	Mint a new token for this call.

`402`

Refusal	What it means	What to do
`SubscriptionRequired` status	The organization's subscription has lapsed, so writes are refused.	An owner settles billing. Reads still work meanwhile.

`403`

Refusal	What it means	What to do
`TenantRequired` userId	The token names no organization.	Choose the organization, then get a new token.
`ScopeRequired` required	The token's roles do not grant the scope this call needs.	Ask an owner or admin for a role that grants it.

`404`

Refusal	What it means	What to do
`FulfillmentOrderNotFound` orderId	No such record in this organization.	Check the id in the path or the body.

`409`

Refusal	What it means	What to do
`DocumentNotLinkable` orderId, reason	The request was refused. `reason` says why.	Nothing changed. Read the record, then decide.
`QuotesDisabled` orderId	The request was refused, and nothing changed.	Nothing changed. Read the record, then decide.
`MirroredFromSource` source	This area is fed by your source system until the organization goes live.	Make the change in the source system, or go live first.

`503`

Refusal	What it means	What to do
`RequestLogUnavailable` tokenId, reason	The service could not record the request, so it did nothing.	Send the same request again shortly.

How refusals work everywhere: Errors.

Used in

Share a quote your customer can accept, step 9: Ask for its link