Manus

Manus AI Agent API integration with managed API key authentication. Create and manage AI agent tasks, projects, files, and webhooks. Use this skill when user...

Security Scan

The skill's requirements and runtime instructions are consistent with a Manus API integration that uses a Maton-managed API key; it only asks for a single MATON_API_KEY and issues network requests to Maton/Manus endpoints.

Purpose & Capability

The skill name and description (Manus integration) match the runtime instructions: all examples call gateway.maton.ai / ctrl.maton.ai and require MATON_API_KEY. Requesting one API key for the gateway is proportionate to the stated purpose.

Instruction Scope

SKILL.md contains example HTTP calls and Python snippets that only read MATON_API_KEY from environment and make network requests to Maton/Manus endpoints. The instructions do not reference unrelated files, system paths, or extra credentials.

Install Mechanism

This is an instruction-only skill with no install spec and no code files to install, which lowers surface risk; nothing is downloaded or written to disk by the skill itself.

Credentials

Only a single environment variable (MATON_API_KEY) is required and is used directly for authorization in the provided examples—this is proportional to a proxied API integration.

Persistence & Privilege

The skill is not marked always:true, does not request system config paths, and does not attempt to modify other skills or persistent agent settings. Autonomous invocation is allowed (platform default) but is not combined with other concerning privileges.

Assessment

This skill appears coherent and limited in scope, but consider the following before installing: - Trust boundary: the skill sends requests to Maton/Manus endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai). Only install if you trust maton.ai and their handling of your data. - API key sensitivity: MATON_API_KEY grants access to your Manus account via the gateway. Use a key with least privilege you need, store it securely, and be prepared to revoke it if exposed. - Autonomous use: the agent may call the skill automatically (platform default). If the agent could handle sensitive data, it might be sent to Maton when the skill runs—consider agent permissions and when the skill may be invoked. - Verify provenance: source and homepage metadata are minimal; if you need higher assurance, confirm the publisher (maton) and that the gateway URLs are legitimate before providing your key. No regex scan findings were present, but absence of findings is not proof of safety; the primary risk here is exposure of your API key or sending sensitive inputs to Maton services.

Access the Manus AI Agent API with managed API key authentication. Create and manage AI agent tasks, projects, files, and webhooks.

Quick Start

# Create a task
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'prompt': 'What is the capital of France?'}).encode()
req = urllib.request.Request('https://gateway.maton.ai/manus/v1/tasks', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Base URL

https://gateway.maton.ai/manus/{native-api-path}

Replace {native-api-path} with the actual Manus API endpoint path. The gateway proxies requests to api.manus.ai and automatically injects your API key.

Authentication

All requests require the Maton API key in the Authorization header:

Authorization: Bearer $MATON_API_KEY

Environment Variable: Set your API key as MATON_API_KEY:

export MATON_API_KEY="YOUR_API_KEY"

Getting Your API Key

1. Sign in or create an account at maton.ai
2. Go to maton.ai/settings
3. Copy your API key

Connection Management

Manage your Manus API key connections at https://ctrl.maton.ai.

List Connections

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections?app=manus&status=ACTIVE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Create Connection

python <<'EOF'
import urllib.request, os, json
data = json.dumps({'app': 'manus'}).encode()
req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Get Connection

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Response:

{
  "connection": {
    "connection_id": "f85eb0d5-87d6-41a7-8271-0449d3e407bd",
    "status": "ACTIVE",
    "creation_time": "2026-02-28T00:12:24.030143Z",
    "last_updated_time": "2026-02-28T00:16:08.920760Z",
    "url": "https://connect.maton.ai/?session_token=...",
    "app": "manus",
    "metadata": {},
    "method": "API_KEY"
  }
}

Open the returned url in a browser to enter your Manus API key.

Delete Connection

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Specifying Connection

If you have multiple Manus connections, specify which one to use with the Maton-Connection header:

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://gateway.maton.ai/manus/v1/tasks')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Maton-Connection', 'f85eb0d5-87d6-41a7-8271-0449d3e407bd')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

If omitted, the gateway uses the default (oldest) active connection.

API Reference

Projects

List Projects

GET /manus/v1/projects

Response:

{
  "object": "list",
  "data": [
    {
      "id": "SJhyBaLtYgQwurQoaT5APi",
      "name": "My Project"
    }
  ]
}

Create Project

POST /manus/v1/projects
Content-Type: application/json

{
  "name": "My Project",
  "default_instructions": "You are a helpful assistant."
}

Response:

{
  "id": "SJhyBaLtYgQwurQoaT5APi",
  "object": "project",
  "name": "My Project",
  "created_at": "1772238309"
}

---

Tasks

List Tasks

GET /manus/v1/tasks

Response:

{
  "object": "list",
  "data": [
    {
      "id": "X7PPAMPNRovuyTXejNeEpv",
      "object": "task",
      "created_at": "1772191227",
      "updated_at": "1772191230",
      "status": "completed",
      "model": "manus-1.6-lite-adaptive",
      "metadata": {
        "task_title": "What is 2+2?",
        "task_url": "https://manus.im/app/X7PPAMPNRovuyTXejNeEpv"
      },
      "output": [...],
      "credit_usage": 0
    }
  ]
}

Get Task

GET /manus/v1/tasks/{task_id}

Response:

{
  "id": "X7PPAMPNRovuyTXejNeEpv",
  "object": "task",
  "created_at": "1772191227",
  "updated_at": "1772191230",
  "status": "completed",
  "model": "manus-1.6-lite-adaptive",
  "metadata": {
    "task_title": "What is 2+2?",
    "task_url": "https://manus.im/app/X7PPAMPNRovuyTXejNeEpv"
  },
  "output": [
    {
      "id": "J9LlYFIfTlMWvR5hrC9FUL",
      "status": "completed",
      "role": "user",
      "type": "message",
      "content": [
        {
          "type": "output_text",
          "text": "What is 2+2? Reply in one word."
        }
      ]
    },
    {
      "id": "kR8Tj0ys7uwzorcSgzqMvZ",
      "status": "completed",
      "role": "assistant",
      "type": "message",
      "content": [
        {
          "type": "output_text",
          "text": "Four"
        }
      ]
    }
  ],
  "credit_usage": 0
}

Task status values: pending, running, completed, failed

Create Task

POST /manus/v1/tasks
Content-Type: application/json

{
  "prompt": "What is the capital of France?"
}

Optional fields:

• project_id (string): Associate task with a project
• file_ids (array): Attach files to the task

Response:

{
  "task_id": "3cbKzkyC9WwRoMwAH8dKuY",
  "task_title": "Capital of France?",
  "task_url": "https://manus.im/app/3cbKzkyC9WwRoMwAH8dKuY"
}

Delete Task

DELETE /manus/v1/tasks/{task_id}

Response:

{
  "id": "3cbKzkyC9WwRoMwAH8dKuY",
  "object": "file",
  "deleted": true
}

---

Files

List Files

GET /manus/v1/files

Returns the 10 most recently uploaded files.

Response:

{
  "object": "list",
  "data": [
    {
      "id": "file-2Gpoz5yhB8seSu9dxZdquR",
      "object": "file",
      "filename": "test.txt",
      "status": "pending",
      "created_at": "1772238309",
      "expires_at": "1772411109"
    }
  ]
}

File status values: pending, ready, expired

Get File

GET /manus/v1/files/{file_id}

Response:

{
  "id": "file-2Gpoz5yhB8seSu9dxZdquR",
  "object": "file",
  "filename": "test.txt",
  "status": "pending",
  "created_at": "1772238309",
  "expires_at": "1772411109"
}

Create File

Creates a file record and returns a presigned S3 upload URL.

POST /manus/v1/files
Content-Type: application/json

{
  "filename": "document.pdf"
}

Response:

{
  "id": "file-2Gpoz5yhB8seSu9dxZdquR",
  "object": "file",
  "filename": "document.pdf",
  "status": "pending",
  "upload_url": "https://vida-private.s3.us-east-1.amazonaws.com/...",
  "upload_expires_at": "1772238489",
  "created_at": "1772238309"
}

Upload your file to the upload_url using a PUT request within the expiration time.

Delete File

DELETE /manus/v1/files/{file_id}

Response:

{
  "id": "file-2Gpoz5yhB8seSu9dxZdquR",
  "object": "file",
  "deleted": true
}

---

Webhooks

Create Webhook

Register a webhook URL to receive task lifecycle notifications.

POST /manus/v1/webhooks
Content-Type: application/json

{
  "webhook": {
    "url": "https://example.com/webhook"
  }
}

Response:

{
  "webhook_id": "J4dD3mwzZiWuJFiEWAvGnK"
}

Delete Webhook

DELETE /manus/v1/webhooks/{webhook_id}

Response:

{}

---

Code Examples

JavaScript

// Create a task
const response = await fetch(
  'https://gateway.maton.ai/manus/v1/tasks',
  {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${process.env.MATON_API_KEY}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({ prompt: 'Summarize the latest news' })
  }
);
const data = await response.json();
console.log(data.task_url);

Python

import os
import requests

# Create a task
response = requests.post(
    'https://gateway.maton.ai/manus/v1/tasks',
    headers={
        'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}',
        'Content-Type': 'application/json'
    },
    json={'prompt': 'Summarize the latest news'}
)
task = response.json()
print(task['task_url'])

Notes

• Tasks are executed asynchronously. Use GET /manus/v1/tasks/{task_id} to poll for completion or set up a webhook
• File uploads use presigned S3 URLs that expire within 3 minutes
• Files expire after ~48 hours if not used
• Webhook payloads are signed with RSA-SHA256 for verification
• Available models: manus-1.6, manus-1.6-lite, manus-1.6-max, manus-1.5, manus-1.5-lite, speed
• Connection uses API_KEY authentication method (not OAuth)

Error Handling

Status	Meaning
400	Invalid request (missing required fields, invalid format)
401	Invalid or missing Maton API key
404	Resource not found
4xx/5xx	Passthrough error from Manus API

Troubleshooting: API Key Issues

1. Check that the MATON_API_KEY environment variable is set:

echo $MATON_API_KEY

2. Verify the API key is valid by listing connections:

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Troubleshooting: Invalid App Name

Ensure your URL path starts with manus. For example:

• Correct: https://gateway.maton.ai/manus/v1/tasks
• Incorrect: https://gateway.maton.ai/v1/tasks

Resources

• Manus API Overview
• Manus API Reference
• Manus Website
• Maton Community
• Maton Support