# List messages from manitu

> What manitu left for this access in the customer panel - unread ones, or all.

- Effect: Read - Changes nothing.
- Idempotent: yes
- Stability: beta
- MCP tool: `manitu_access_message_list` on https://mcp.manitu.de/mcp
- REST: `POST https://api.manitu.de/v1/access/message/list`
- Needs: `account_user`
- Page: /reference/access/message/list/

## MCP tool

`manitu_access_message_list`

### Description for the model

Lists the messages manitu left for the access this connection uses, in the manitu customer panel (notices about services, invoices, security) - only the unread ones unless include_read, without their text: manitu_access_message_get has it. Urgent ones are about something the customer should do soon - mention them. It changes nothing, not even read status.

### Arguments

- `include_read` (boolean) - true: read ones too; left out or false: only the unread ones.

### Example

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_access_message_list",
    "arguments": {}
  }
}
```

## REST

`POST https://api.manitu.de/v1/access/message/list`

### Authentication

One of `X-API-Key`, `Authorization: Bearer …` - never more than one in a request.

### Request body

JSON; unknown fields are refused.

- `include_read` (boolean) - true: read ones too; left out or false: only the unread ones.

### Response

In `data`; the rest of the body as on every call.

- `message_list` (array of object, required)
  - `message_list[].message_id` (integer, required)
  - `message_list[].status` (string, required) - new: not read yet; read: marked as read (opened in the panel, or set); deleted is never listed. (one of `"new"`, `"read"`, `"deleted"`)
  - `message_list[].priority` (string, required) - urgent: the customer should read it soon - it is about something that needs doing. (one of `"normal"`, `"urgent"`)
  - `message_list[].subject` (string | null, required)
  - `message_list[].created_at` (string | null, required) - (format `date-time`)
  - `message_list[].read_at` (string | null, required) - When it was first read; it stays when set back to new. (format `date-time`)
- `count_new` (integer, required) - Unread messages.
- `count_new_urgent` (integer, required) - Unread urgent messages.

### Statuses

- `200` Success.
- `400` The request does not match the declared input schema.
- `401` No credential was presented, or it was not recognised.
- `403` The credential is not permitted to use this operation.
- `500` The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.
- `503` The channel this operation forwards through is unavailable.

### Example

```sh
curl -X POST 'https://api.manitu.de/v1/access/message/list' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{}'
```

## Example result

```json
{
  "message_list": [
    {
      "message_id": 12345,
      "status": "new",
      "priority": "normal",
      "subject": "string",
      "created_at": "2026-10-23T12:00:00+02:00",
      "read_at": "2026-10-23T12:00:00+02:00"
    }
  ],
  "count_new": 1,
  "count_new_urgent": 1
}
```