A page of the places this organization holds stock, oldest first

GET /locations

There is always at least one: a fulfillable location is provisioned when the organization is created, and the last fulfillable one cannot be archived or switched off. q is a case-insensitive substring of the name or the note; archived and fulfillable narrow to one side of each flag, and omitting them means either. Omitting limit returns every match in one page — which is what a screen filling a location picker wants, and what this endpoint has always done.

Access

Requires locations:read.

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

AI agent tool

Agents call this as inventory_list_locations (Inventory: List locations), in the locations toolset. It only reads.

Connecting an agent: AI agents.

Example

curl

curl -X GET 'https://inventory.getmanifold.io/locations?archived=false' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN"

JavaScript (fetch)

const response = await fetch("https://inventory.getmanifold.io/locations?archived=false", {
  method: "GET",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}` },
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();

Response · 200 · application/json

{
  "items": [
    {
      "id": "loc_019cadd3-8330-7e12-aa44-2cd5f05da74a",
      "name": "Main",
      "fulfillable": true,
      "archived": false,
      "address": {
        "company": "Tidewater Supply Co.",
        "address1": "Unit 4, 18 Example Road",
        "city": "Brookvale",
        "province": "New South Wales",
        "provinceCode": "NSW",
        "country": "Australia",
        "countryCode": "AU",
        "zip": "2100"
      },
      "coordinates": {
        "latitude": -33.7614,
        "longitude": 151.2675
      },
      "rank": 100,
      "bindings": [
        {
          "channelId": "chn_019ce0d8-5d50-7597-8115-9ea4c1b646da",
          "externalId": "store-location-1",
          "externalName": "Warehouse"
        }
      ],
      "createdAt": "2026-03-02T09:14:06.000Z",
      "updatedAt": "2026-03-12T07:00:05.000Z"
    },
    {
      "id": "loc_019cd06e-3b38-7e92-b496-c92f8184a3aa",
      "name": "Shopfront",
      "fulfillable": true,
      "archived": false,
      "note": "Counter stock; restocked from Main twice a week.",
      "address": {
        "company": "Tidewater Supply Co.",
        "address1": "Shop 2, 40 Example Parade",
        "city": "Brookvale",
        "province": "New South Wales",
        "provinceCode": "NSW",
        "country": "Australia",
        "countryCode": "AU",
        "zip": "2100"
      },
      "coordinates": {
        "latitude": -33.7633,
        "longitude": 151.2694
      },
      "rank": 200,
      "bindings": [],
      "createdAt": "2026-03-09T02:30:11.000Z",
      "updatedAt": "2026-03-09T02:30:11.000Z"
    },
    {
      "id": "loc_01a15b90-35a0-738e-af06-23ef7db9fddc",
      "name": "Quarantine bay",
      "fulfillable": false,
      "archived": false,
      "note": "Returns awaiting inspection. Never sold from.",
      "rank": 100,
      "bindings": [],
      "createdAt": "2026-10-20T23:05:40.000Z",
      "updatedAt": "2026-10-20T23:05:40.000Z"
    }
  ],
  "total": 3,
  "offset": 0
}

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: inventory-manager.openapi.json. Base URL https://inventory.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.

`401`

Refusal	What it means	What to do
`Unauthorized` reason	The token is missing, expired or not one Manifold issued.	Get a fresh token and send the call again.
`TokenAlreadyUsed` tokenId	A single-use app token was already spent.	Mint a new token for this call.

`402`

Refusal	What it means	What to do
`SubscriptionRequired` status	The organization's subscription has lapsed, so writes are refused.	An owner settles billing. Reads still work meanwhile.

`403`

Refusal	What it means	What to do
`TenantRequired` userId	The token names no organization.	Choose the organization, then get a new token.
`ScopeRequired` required	The token's roles do not grant the scope this call needs.	Ask an owner or admin for a role that grants it.

`409`

Refusal	What it means	What to do
`MirroredFromSource` source	This area is fed by your source system until the organization goes live.	Make the change in the source system, or go live first.

`503`

Refusal	What it means	What to do
`RequestLogUnavailable` tokenId, reason	The service could not record the request, so it did nothing.	Try again shortly.

How refusals work everywhere: Errors.

Used in

Running more than one location, step 1: See what you already have
Print labels at a site, step 1: The site