Mantle's Core API is the mechanism in which your integration or Mantle Extension will retrieve and modify Mantle data.

There are two ways to obtain an access token needed to make API calls:

For simple back-end only integrations, you can generate an API token with specific permissions here: https://app.heymantle.com/settings/api_tokens
For public or private Mantle extensions, you can use the OAuth flow to ask for the user to grant access to the resources you need. For more information, see oauth authorization code grant flow.

Once an access token has been obtained, with the appropriate scopes, developers can make call to our core API to fetch and mutate Organization data by passing it along with API requests in the Authorization: Bearer your-token header

Developers may also make use of webhooks to receive notifications when data changes.