> ## Documentation Index
> Fetch the complete documentation index at: https://docs.manus.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Use the X-API-Key header to authenticate with the Enterprise Data Export API v1

<sup>Questions or issues? Contact us at [api-support@manus.ai](mailto:api-support@manus.ai).</sup>

All v1 API requests require API key authentication via the `X-API-Key` header.

## Get an enterprise API key

<Steps>
  <Step title="Open Compliance API settings">
    Sign in as a Tenant Owner and go to [Compliance API settings](https://manus.im/app#settings/compliance-api).
  </Step>

  <Step title="Select a key type">
    Choose **e-Discovery & legal hold** — currently the only key type available. Additional key types may be introduced in the future.
  </Step>

  <Step title="Create and copy the key">
    Generate a new key with a descriptive label (e.g. "audit-2026-q2"). Copy it immediately — it is shown only once. Store it in a secrets manager.
  </Step>
</Steps>

## Use the API key

Include the key in the `X-API-Key` header on every request:

<Tabs>
  <Tab title="cURL">
    ```bash theme={null}
    curl --location --request POST 'https://api.manus.im/dataexport.v1.EnterpriseDataExportService/ListTasks' \
      --header 'X-API-Key: <your-api-key>' \
      --header 'Content-Type: application/json' \
      --data-raw '{
        "user": "user@example.com",
        "page": 1,
        "page_size": 10
      }'
    ```
  </Tab>

  <Tab title="Python">
    ```python theme={null}
    import os
    import requests

    response = requests.post(
        "https://api.manus.im/dataexport.v1.EnterpriseDataExportService/ListTasks",
        headers={
            "X-API-Key": os.environ["MANUS_ENTERPRISE_API_KEY"],
            "Content-Type": "application/json",
        },
        json={
            "user": "user@example.com",
            "page": 1,
            "page_size": 10,
        },
    )
    print(response.json())
    ```
  </Tab>

  <Tab title="TypeScript">
    ```typescript theme={null}
    const response = await fetch(
      "https://api.manus.im/dataexport.v1.EnterpriseDataExportService/ListTasks",
      {
        method: "POST",
        headers: {
          "X-API-Key": process.env.MANUS_ENTERPRISE_API_KEY!,
          "Content-Type": "application/json",
        },
        body: JSON.stringify({
          user: "user@example.com",
          page: 1,
          page_size: 10,
        }),
      },
    );

    const data = await response.json();
    console.log(data);
    ```
  </Tab>
</Tabs>

<Warning>
  Enterprise API keys grant access to **all users' data** within your enterprise, including deleted accounts. Treat them as highly sensitive credentials. Rotate keys periodically and revoke any key that may have been exposed.
</Warning>