Purchasing Manager API · pos
The supplier scorecard
GET /supplier-performance
The supplier scorecard: every supplier with orders in the window (the last windowDays, default 365), best first — learned lead time (median, p80, p90, drift), on time against the day promised, on time in full (OTIF), fill rate, damage, short, over and wrong-item rates, price variance between invoice and order, invoice accuracy and a weighted score — with every carrier's transit time, lateness against its first ETA and damage, and each carrier × supplier lane, so a problem can be told to be the supplier's or the shipping provider's.
Folded from the orders' receipts, issues and shipments; a rate is absent when nothing was measured.
Access
Requires purchasing:read.
How scopes come from roles: Scopes and roles. Getting a token: Authentication and app tokens.
AI agent tool
Agents call this as purchasing_get_supplier_scorecard (Purchasing: Get supplier scorecard), in the reporting toolset. It only reads.
Connecting an agent: AI agents.
Example
curl -X GET 'https://purchasing.getmanifold.io/supplier-performance?windowDays=365' \
-H "Authorization: Bearer $MANIFOLD_TOKEN"const response = await fetch("https://purchasing.getmanifold.io/supplier-performance?windowDays=365", {
method: "GET",
headers: { Authorization: `Bearer ${process.env.MANIFOLD_TOKEN}` },
});
if (!response.ok) throw new Error(`${response.status}: ${await response.text()}`);
const answer = await response.json();{
"asOf": "2026-10-29",
"windowDays": 365,
"suppliers": [
{
"supplierKey": "cmp_01a15884-6399-7e5f-8a6b-1c2d3e4f5a6b",
"supplierId": "cmp_01a15884-6399-7e5f-8a6b-1c2d3e4f5a6b",
"supplier": "Northwind Components",
"orders": 11,
"receipts": 12,
"unitsReceived": 460,
"leadTime": {
"sample": 12,
"medianDays": 9,
"p80Days": 11,
"p90Days": 13,
"minDays": 6,
"maxDays": 15,
"driftDays": 1
},
"lateness": {
"sample": 12,
"medianDays": 0,
"p80Days": 2,
"p90Days": 3,
"minDays": -2,
"maxDays": 5,
"driftDays": 1
},
"onTime": {
"measured": 12,
"met": 9,
"ratePercent": 75
},
"otif": {
"measured": 10,
"met": 7,
"ratePercent": 70
},
"fillRatePercent": 98.5,
"damageRatePercent": 0.4,
"shortRatePercent": 1.5,
"overRatePercent": 0,
"wrongItemRatePercent": 0,
"priceVariancePercent": 0.4,
"invoiceAccuracy": {
"measured": 10,
"met": 9,
"ratePercent": 90
},
"score": 84.8,
"lastReceivedOn": "2026-10-01"
}
],
"carriers": [
{
"carrier": "StarTrack",
"shipments": 14,
"delivered": 14,
"transit": {
"sample": 8,
"medianDays": 3,
"p80Days": 3,
"p90Days": 4,
"minDays": 2,
"maxDays": 5
},
"lateness": {
"sample": 8,
"medianDays": 0,
"p80Days": 1,
"p90Days": 1,
"minDays": -1,
"maxDays": 2
},
"onTime": {
"measured": 8,
"met": 7,
"ratePercent": 87.5
},
"damageRatePercent": 0.6,
"unitsDelivered": 610
}
],
"lanes": [
{
"carrier": "StarTrack",
"shipments": 8,
"delivered": 8,
"transit": {
"sample": 8,
"medianDays": 3,
"p80Days": 3,
"p90Days": 4,
"minDays": 2,
"maxDays": 5
},
"lateness": {
"sample": 8,
"medianDays": 0,
"p80Days": 1,
"p90Days": 1,
"minDays": -1,
"maxDays": 2
},
"onTime": {
"measured": 8,
"met": 7,
"ratePercent": 87.5
},
"damageRatePercent": 0.6,
"unitsDelivered": 320,
"supplierKey": "cmp_01a15884-6399-7e5f-8a6b-1c2d3e4f5a6b",
"supplier": "Northwind Components"
}
]
}The panel writes this call in other languages. It does not send it: Manifold's APIs do not take calls from a web
page on another site, so run the call from your own code or terminal. The whole API as OpenAPI: purchasing-manager.openapi.json. Base URL https://purchasing.getmanifold.io.
Errors
Every refusal is a status and a JSON body whose _tag names it. A refused call changes nothing.
401
| Refusal | What it means | What to do |
|---|---|---|
Unauthorized reason | The token is missing, expired or not one Manifold issued. | Get a fresh token and send the call again. |
TokenAlreadyUsed tokenId | A single-use app token was already spent. | Mint a new token for this call. |
402
| Refusal | What it means | What to do |
|---|---|---|
SubscriptionRequired status | The organization's subscription has lapsed, so writes are refused. | An owner settles billing. Reads still work meanwhile. |
403
| Refusal | What it means | What to do |
|---|---|---|
TenantRequired userId | The token names no organization. | Choose the organization, then get a new token. |
ScopeRequired required | The token's roles do not grant the scope this call needs. | Ask an owner or admin for a role that grants it. |
409
| Refusal | What it means | What to do |
|---|---|---|
MirroredFromSource source | This area is fed by your source system until the organization goes live. | Make the change in the source system, or go live first. |
503
| Refusal | What it means | What to do |
|---|---|---|
RequestLogUnavailable tokenId, reason | The service could not record the request, so it did nothing. | Try again shortly. |
How refusals work everywhere: Errors.