Managing API Tokens

Manifest's API allows you to easily bring Manifest's functionality to your individual workflow.

Creating a New API Token

1. Go to Settings, then select the API Tokens tab.
2. Click the "Create New Token" button in the top right.
3. Fill in your token details:
   • Token name (*Please note that this must be a unique name)
   • Description (Optional)
   • Scope
   • Expiration length.
     • All Manifest API Tokens expire within 1 year. We highly recommend setting the expiration time to < 3 months for security reasons. Reminders will be sent to your email as the expiration date approaches.
4. Click "Confirm" to generate your token.

❗️

Copy your API token immediately and store it securely - you won't be able to see it again after leaving this screen.

Using Your API Token

Once you've created your token, you can use it to:

• Authenticate the Manifest CLI
• Set up Github Actions
• Configure automated SBOM uploads

For security reasons, we recommend that each integration should use a unique API token so you can track and manage access individually.