Product SiteDocumentation Site

Chapter 6. MantisBT REST API

6.1. Authentication
6.2. Impersonation
6.2.1. Response Headers
6.3. Postman
6.4. Exporting Postman Collection
The primary means of integrating with MantisBT with web services is with the bundled REST API, which is accessible at https://server.com/mantis/api/rest/.

6.1. Authentication

REST API calls can be authenticated using one of the following methods:
API Token
The primary authentication method. Create an API token for your user account and pass it in the Authorization HTTP request header. API token authentication is required when using impersonation.
Anonymous
When anonymous access is enabled and an anonymous account is configured, the API can be accessed without authentication for read-only operations.
Cookie (Web UI)
Used internally by the MantisBT Web UI when JavaScript calls the API on behalf of an already authenticated user session.