Skip to main content
Questions or issues? Contact us at api-support@manus.ai. All team v2 APIs use an enterprise API key issued from Compliance settings, sent in the X-API-Key header. Only Tenant Owners can issue these keys.

Get an enterprise API key

1

Open Compliance settings

Sign in as a Tenant Owner and go to Compliance settings.
2

Select a key type

Choose the key type that matches the product you want to use. Each key type is scoped to a specific surface and cannot be used outside it.
Key typePurposeExpiry
e-Discovery & legal holdEnterprise Data Exportoptional
SIEMEnterprise SIEM Integrations — export audit events (Tier 1 metadata; Tier 2 payloads)optional
Team User ManagementTeam User Management (provision / update / offboard members from your IDP)optional, max 365 days
Team Asset AuditShared Team Asset Governance — read-only DSPM enumeration (team.asset.list)optional
Team Asset ManagementShared Team Asset Governance — admin override of share scope (team.asset.update_scope); also accepted on team.asset.list since write access implicitly includes readoptional
3

Create and copy the key

Generate a new key with a descriptive label (e.g. “sailpoint-prod-2026-q2”). Copy it immediately — it is shown only once. Store it in a secrets manager.
Enterprise API keys grant access to all users’ data within your enterprise (and, for Team User Management keys, the ability to add / remove members). Treat them as highly sensitive credentials. Rotate keys periodically and revoke any key that may have been exposed.

Use the API key

Include the key in the X-API-Key header on every request:
curl --location --request POST 'https://api.manus.im/v2/enterprise.export.create' \
  --header 'X-API-Key: <your-api-key>' \
  --header 'Content-Type: application/json' \
  --data-raw '{
    "user_id": "114504",
    "scope": "ENTERPRISE_EXPORT_SCOPE_FULL",
    "include_files": true,
    "reason": "compliance audit"
  }'

Authentication errors

If the key is missing, invalid, or its key type does not match the endpoint being called, the API returns:
{
  "ok": false,
  "request_id": "req_abc123",
  "error": {
    "code": "unauthenticated",
    "message": "Invalid or missing enterprise API key"
  }
}