Open a location

POST /locations

fulfillable (default true) is the flag with teeth: stock at a non-fulfillable site can be received, held and transferred, but never reserved, allocated or dispatched to a customer — which is what makes a quarantine bay, a repair bench or a 3PL you have not switched on yet safe to hold stock in. rank places it in the order routing walks sites in, lowest first (every site starts at 100, so an unranked organization routes as it always did). Appends inventory.location-created. Idempotent on the name: a second open location with the same name (trimmed, case-insensitive) is refused with 409 LocationNameConflict, so a retried open never makes two.

Access

Requires locations:write.

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

Retries

Idempotent on the name: a second open location with the same name (trimmed, case-insensitive) is refused with 409 LocationNameConflict, so a retried open never makes two.

A retry with the same key answers 201, with what the first call recorded.

Why every write carries a key: Idempotency and retries.

Facts appended

inventory.location-created

What a fact is: Facts and the journal.

AI agent tool

Agents call this as inventory_create_location (Inventory: Create location), in the locations toolset.

Connecting an agent: AI agents.

Example

Open a quarantine bay: stock can be held there but never sold from it.

curl

curl -X POST 'https://inventory.getmanifold.io/locations' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{
  "name": "Quarantine bay",
  "fulfillable": false,
  "note": "Returns awaiting inspection. Never sold from."
}'

JavaScript (fetch)

const response = await fetch("https://inventory.getmanifold.io/locations", {
  method: "POST",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}`, "Content-Type": "application/json" },
  body: JSON.stringify({
    "name": "Quarantine bay",
    "fulfillable": false,
    "note": "Returns awaiting inspection. Never sold from."
  }),
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();

Request body · application/json

{
  "name": "Quarantine bay",
  "fulfillable": false,
  "note": "Returns awaiting inspection. Never sold from."
}

Response · 201 · application/json

{
  "id": "loc_01a15b90-35a0-738e-af06-23ef7db9fddc",
  "name": "Quarantine bay",
  "fulfillable": false,
  "archived": false,
  "note": "Returns awaiting inspection. Never sold from.",
  "rank": 100,
  "bindings": [],
  "createdAt": "2026-10-20T23:05:40.000Z",
  "updatedAt": "2026-10-20T23:05:40.000Z"
}

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: inventory-manager.openapi.json. Base URL https://inventory.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing. Some can answer a retry of a call that already worked: they are marked.

`401`

Refusal	What it means	What to do
`Unauthorized` reason	The token is missing, expired or not one Manifold issued.	Get a fresh token and send the call again.
`TokenAlreadyUsed` tokenId	A single-use app token was already spent.	Mint a new token for this call.

`402`

Refusal	What it means	What to do
`SubscriptionRequired` status	The organization's subscription has lapsed, so writes are refused.	An owner settles billing. Reads still work meanwhile.

`403`

Refusal	What it means	What to do
`TenantRequired` userId	The token names no organization.	Choose the organization, then get a new token.
`ScopeRequired` required	The token's roles do not grant the scope this call needs.	Ask an owner or admin for a role that grants it.

`409`

Refusal	What it means	What to do
`LocationNameConflict` name Can answer a retry	Another location already has this name.	If this answers a retry, your first call probably landed. Choose another name.
`MirroredFromSource` source	This area is fed by your source system until the organization goes live.	Make the change in the source system, or go live first.

`503`

Refusal	What it means	What to do
`RequestLogUnavailable` tokenId, reason	The service could not record the request, so it did nothing.	Send the same request again, with the same key.

How refusals work everywhere: Errors.

Used in

Running more than one location, step 3: Open a quarantine bay