Purchasing Manager API · pos

Stock on its way for skus

GET /incoming

Stock on its way for skus (comma-separated, up to 200): each open purchase order's outstanding units, its number and expected delivery day, soonest first.

No cost, no supplier — readable with stock:read; the orders with prices are GET /pos. Read-only.

Access

Requires stock:read or purchasing:read.

Any one of these scopes is enough.

How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.

AI agent tool

No agent tool. the stock on order without its prices, for a rep's screens; an agent that may see purchase orders reads them whole with purchasing_list_pos

Connecting an agent: AI agents.

Example

curl
curl -X GET 'https://purchasing.getmanifold.io/incoming?skus=WIDGET-BLUE' \
  -H "Authorization: Bearer $MANIFOLD_TOKEN"
JavaScript (fetch)
const response = await fetch("https://purchasing.getmanifold.io/incoming?skus=WIDGET-BLUE", {
  method: "GET",
  headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}` },
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();
Response · 200 · application/json
{
  "items": [
    {
      "sku": "WIDGET-BLUE",
      "poId": "po_01a15876-6c9e-7b3a-8c4d-9e0f1a2b3c4d",
      "poNumber": "PO-00001",
      "quantity": 40,
      "expectedOn": "2026-10-01"
    }
  ]
}

The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: purchasing-manager.openapi.json. Base URL https://purchasing.getmanifold.io.

Errors

Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.

401

RefusalWhat it meansWhat to do
Unauthorized reason The token is missing, expired or not one Manifold issued.Get a fresh token and send the call again.
TokenAlreadyUsed tokenId A single-use app token was already spent.Mint a new token for this call.

402

RefusalWhat it meansWhat to do
SubscriptionRequired status The organization's subscription has lapsed, so writes are refused.An owner settles billing. Reads still work meanwhile.

403

RefusalWhat it meansWhat to do
TenantRequired userId The token names no organization.Choose the organization, then get a new token.
ScopeRequired required The token's roles do not grant the scope this call needs.Ask an owner or admin for a role that grants it.

409

RefusalWhat it meansWhat to do
MirroredFromSource source This area is fed by your source system until the organization goes live.Make the change in the source system, or go live first.

503

RefusalWhat it meansWhat to do
RequestLogUnavailable tokenId, reason The service could not record the request, so it did nothing.Try again shortly.

How refusals work everywhere: Errors.