A ledger app lets go of every account it keeps

POST /accounts/managed/release

A ledger app lets go of every account it keeps — when its ledger is disconnected — under its own token (403 NotALedgerApp for anyone else).

The accounts stay, as they last were, kept by the organization again and editable here. An uninstalled app's accounts are let go by the core itself, on auth.app-uninstalled. Appends inventory.account-saved per account released. Idempotent by state: an app that keeps nothing appends nothing.

Access

Requires financials:write.

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

Retries

Idempotent by state: an app that keeps nothing appends nothing.

Why every write carries a key: Idempotency and retries.

Facts appended

inventory.account-saved

What a fact is: Facts and the journal.

AI agent tool

No agent tool. only a ledger app's own token lets go of its accounts; disconnecting or uninstalling the app does it, from the app's page in the admin

Connecting an agent: AI agents.

Example

The ledger was disconnected: the accounts it kept are the tenant's again.

curl

curl -X POST 'https://inventory.getmanifold.io/accounts/managed/release' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN"

JavaScript (fetch)

const response = await fetch("https://inventory.getmanifold.io/accounts/managed/release", {
  method: "POST",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}` },
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();

Response · 200 · application/json

{
  "released": [
    "acct_019e80e8-c900-79a0-be53-3d5443d6d0a2",
    "acct_01a161c4-0a00-72db-a577-07bcb2a24026"
  ]
}

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: inventory-manager.openapi.json. Base URL https://inventory.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.

`401`

Refusal	What it means	What to do
`Unauthorized` reason	The token is missing, expired or not one Manifold issued.	Get a fresh token and send the call again.
`TokenAlreadyUsed` tokenId	A single-use app token was already spent.	Mint a new token for this call.

`402`

Refusal	What it means	What to do
`SubscriptionRequired` status	The organization's subscription has lapsed, so writes are refused.	An owner settles billing. Reads still work meanwhile.

`403`

Refusal	What it means	What to do
`NotALedgerApp`	Only a ledger app may call this.	Call it with the ledger app's token.
`TenantRequired` userId	The token names no organization.	Choose the organization, then get a new token.
`ScopeRequired` required	The token's roles do not grant the scope this call needs.	Ask an owner or admin for a role that grants it.

`409`

Refusal	What it means	What to do
`MirroredFromSource` source	This area is fed by your source system until the organization goes live.	Make the change in the source system, or go live first.

`503`

Refusal	What it means	What to do
`RequestLogUnavailable` tokenId, reason	The service could not record the request, so it did nothing.	Send the same request again shortly.

How refusals work everywhere: Errors.