What happened: how the Manus AI X-ray was made

The X-ray of Manus AI · the deck · how every X-ray is made · X-ray another name

This page shows what the agents did to make the X-ray of Manus AI, in the order it happened. Every number comes from two files: the raw record of the search (data/xray/manus-ai/search/20261107T190852Z.json) and the X-ray itself (data/xray/manus-ai/xray.json).

Step 1 of 6

1. The ask

On 7 November 2026 at 19:08 UTC, xray@web-summit.dinis typed one line into the search tool (admin/tools/xray-search.mjs): "Manus AI (manus.im), the autonomous agent", as a company. It was not typed at the booth: that path is still being built (WS-194).

The search tool is the orchestrator. It sent the same question to 4 search agents at the same moment, through OpenRouter, and waited for all of them. Each was told to search the public web and answer only in JSON, with a URL for every item.

  1. Perplexity search perplexity/sonar
  2. OpenAI search openai/gpt-5.4-nano:online
  3. Gemini search google/gemini-3.1-flash-lite:online
  4. OpenRouter web search anthropic/claude-haiku-5.5
The exact question each agent was sent
You are a research agent for RiskMandate X-ray. Subject (a company): "Manus AI (manus.im), the autonomous agent".
Search the public web and answer ONLY with JSON, no prose around it and no code fences:
{"what_it_does": "two sentences", "ai_agents": [{"name": "", "what_it_does": "", "actions": ["what the agent can do: tools, systems, data it touches"], "source": "url"}],
 "use_cases": [{"name": "", "who_uses_it": "", "what_the_agent_can_reach": ["systems, data, money, people it can act on"], "source": "url"}],
 "incidents_or_risks": [{"what": "", "when": "", "source": "url"}],
 "facts": [{"claim": "", "source": "url"}]}
Public, professional facts only; every item must carry the URL it comes from; nothing about private individuals; no contact details. If you find nothing for a field, give an empty list.

Rebuilt from admin/tools/xray-ask.mjs with this run's subject and kind. The question has not changed since the first run.

Step 2 of 6

2. Each search agent's call

Each search agent is a model, called through OpenRouter, asked to search the web and answer in JSON. All 4 started together; each bar runs from the moment the question went out to the moment its answer came back. The whole fan-out took 23.4 s, the time of the slowest.

Perplexity search8.0 s
OpenAI search23.4 s
Gemini search5.0 s
OpenRouter web search17.6 s

Perplexity search

perplexity/sonar

Time
8.0 s
Tokens in / out
215 / 926
Cost
$0.0061
Finished
stop: it finished its answer
URLs given
15 (15 returned as citations, 12 named in its answer)
Items in its answer
16
Leads checked
18: 18 confirmed, 0 not found, 0 unverified

Some of what it said, word for word:

  • Manus says it builds general AI agents as the 'Action Engine for life.'
  • Manus 2.0 includes a cascade agent harness, Cloud Computer, Automations, Manus Studio, and Cue.
  • Manus is available for macOS, Windows, iOS, and Android.

OpenAI search

openai/gpt-5.4-nano:online

Time
23.4 s
Tokens in / out
21,882 / 1,767
Cost
$0.0461
Finished
stop: it finished its answer
URLs given
10 (0 returned as citations, 10 named in its answer)
Items in its answer
12
Leads checked
14: 14 confirmed, 0 not found, 0 unverified

Some of what it said, word for word:

  • Manus provides an agent platform that executes complex tasks independently (agent mode).
  • Manus offers a dedicated cloud VM called the “Manus Cloud Computer” that runs applications/bots/scripts 24/7 and differs from a standard temporary sandbox.
  • Manus provides connectors and an integration layer (including MCP server connectivity) so Manus can securely access third-party data/APIs and execute workflows.

Gemini search

google/gemini-3.1-flash-lite:online

Time
5.0 s
Tokens in / out
233 / 864
Cost
$0.0429
Finished
stop: it finished its answer
URLs given
4 (0 returned as citations, 4 named in its answer)
Items in its answer
11
Leads checked
13: 10 confirmed, 3 not found, 0 unverified

Some of what it said, word for word:

  • Manus AI was developed by Butterfly Effect Pte. Ltd., a company founded by Xiao Hong.
  • In late 2025, Meta announced an agreement to acquire Manus in a deal reportedly valued between US$2-3 billion.
  • Manus operates using a credit-based system where usage is metered by complexity, with a free tier available.

OpenRouter web search

anthropic/claude-haiku-5.5, with OpenRouter's web search plugin

Time
17.6 s
Tokens in / out
33,642 / 3,738
Cost
$0.0250
Finished
stop: it finished its answer
URLs given
13 (0 returned as citations, 13 named in its answer)
Items in its answer
20
Leads checked
26: 25 confirmed, 1 not found, 0 unverified

Some of what it said, word for word:

  • Manus launched in invitation-only beta on March 6, 2025.
  • Manus is developed by Butterfly Effect, a company founded in China and based in Singapore, whose Singapore entity took over operating the product outside China.
  • Manus is operated by Butterfly Effect Pte. Ltd., based in Singapore.

"Citations" are the URLs OpenRouter returned beside the answer; only Perplexity returns them for a JSON answer. "Named in its answer" are the URLs inside the JSON. Both are leads: nothing is taken from them until a source is read. "Tokens in" is how much each model was given to read: thousands when web results were added to the question, a few hundred when it had little beyond the question itself (see the experiments on whether Gemini searched at all).

Step 3 of 6

3. From claims to facts

What a model says is a lead. Only what we read on its source reaches the page.

The reading agent turned the 4 answers into 71 leads, each tagged with the model that said it, and looked for each one on a source it read. 67 confirmed, 4 not found, 0 unverified.

confirmednot foundunverified

  • Confirmed: a source we read says it.
  • Not found: we read the source, or looked for one, and it does not say it.
  • Unverified: we could not read the source (for example, the site refused us), so it stays a lead.
AgentLeadsConfirmedNot foundUnverified
Perplexity search181800
OpenAI search141400
Gemini search131030
OpenRouter web search262510
All716740

What did not hold up, and why

ModelWhat the model saidStatusWhy
geminiRapid prototyping use case reaches code editors, web hosting platforms and API endpoints.not-foundThe cited home page does not say this.
geminiSupport operations use case reaches knowledge bases, ticketing systems and QA audit logs.not-foundThe cited home page does not say this.
geminiPotential for security misconfiguration where AI misclassifies traffic (April 2025).not-foundThe cited fairinstitute.org home page does not mention Manus.
openrouterManus coordinates specialised sub-agents such as planners and knowledge agents.not-foundThe cited welcome page does not say this; Wide Research says its subagents are general-purpose Manus instances, not predefined roles (s20).

Step 4 of 6

4. The reading agent

A reading agent: a Claude Code sub-agent of xray@web-summit.dinis, one per subject. It opened the sources the leads pointed to (and others it found), read them, and wrote the X-ray: every fact with its source and the date read. It finished at 7 November 2026 at 19:16 UTC.

43sources read
36tool calls
6 min 29 sreading time
210ktokens used

The sources, by kind

own-site22
docs12
press2
filing0
other7
All 43 sources, with the date each was read
IdSourceKindRead
s1Manus: Hands On AI, Manusown-site2026-11-07
s2About us - Manus, Manusown-site2026-11-07
s3Manus Features: Build, Create, Research and Automate, Manusown-site2026-11-07
s4Welcome, Manus Documentationdocs2026-11-07
s5Browser Operator, Manus Documentationdocs2026-11-07
s6Manus Browser Operator: Turn Any Browser into an AI Browser, Manusown-site2026-11-07
s7Cloud browser, Manus Documentationdocs2026-11-07
s8Manus Studio, Manus Documentationdocs2026-11-07
s9Connectors (last updated 2 November 2026), Manus Documentationdocs2026-11-07
s10How can I use Manus Connectors?, Manus Help Centerdocs2026-11-07
s11Gmail AI Assistant: Triage Inbox and Prep Meetings, Manusown-site2026-11-07
s12Notion MCP: Read, Update and Automate Your Workspace, Manusown-site2026-11-07
s13Asana AI Agent and MCP: Plan, Track and Report Work, Manusown-site2026-11-07
s14What is the Cloud Computer?, Manus Help Centerdocs2026-11-07
s15Troubleshooting the "My Computer" Feature Not Appearing or Connecting, Manus Help Centerdocs2026-11-07
s16What are the differences between Chat mode and Agent mode?, Manus Help Centerdocs2026-11-07
s17Verify before you act (23 June 2026), Manus Help Centerdocs2026-11-07
s18Introduction: Manus API v2, Manus API Docsdocs2026-11-07
s19Agents: Manus API v2, Manus API Docsdocs2026-11-07
s20Introducing Wide Research (31 July 2025), Manus Blogown-site2026-11-07
s21Introducing Automations: Put Repetitive Work on Autopilot (15 October 2026), Manus Blogown-site2026-11-07
s22Introducing Manus 2.0 (28 September 2026), Manus Blogown-site2026-11-07
s23Introducing Plan Mode: A New Way to Work with Manus (22 July 2026), Manus Blogown-site2026-11-07
s24Introducing Manus in Your Chat: Your Personal Agent, Everywhere You Are (16 February 2026), Manus Blogown-site2026-11-07
s25Blog - Manus, Manus Blogown-site2026-11-07
s26A Note to Our Users (11 August 2026), Manus Blogown-site2026-11-07
s27Manus Resumes Independent Operations (1 September 2026), Manus Blogown-site2026-11-07
s28AI Workspace for Projects and Team Knowledge, Manusown-site2026-11-07
s29Build custom AI workflows with Manus Agent Skills, Manusown-site2026-11-07
s30Download Manus, Manusown-site2026-11-07
s31Manus AI Agent Toolkit for Delivering Work, Manusown-site2026-11-07
s32Manus for Product Management: AI Agent for Product Management and Research, Manusown-site2026-11-07
s33Manus for Marketing: AI Agent for Marketing Automation, Manusown-site2026-11-07
s34Security - Manus, Manusown-site2026-11-07
s35SilentBridge: Zero-Click AI Agent Takeover in Meta Manus (24 February 2026), Aurascape AuraLabsother2026-11-07
s36Security and Compliance Risks of Using Manus AI (last updated June 2026), Aurascapeother2026-11-07
s37This popular AI agent could be hacked by a single email: with potentially disastrous consequences (2 October 2026), TechRadarpress2026-11-07
s38Manus AI Agent Exposed by Prompt-Injection Bug (24 September 2026), SQ Magazinepress2026-11-07
s39$4B Manus AI Platform Exploited Through Prompt Injection Vulnerability (24 September 2026), Aviatrix Threat Research Centerother2026-11-07
s40How Prompt Injection Exposes Manus' VS Code Server to the Internet (25 August 2025), Embrace The Redother2026-11-07
s41Manus (AI agent), Wikipediaother2026-11-07
s42From Mind to Machine: The Rise of Manus AI as a Fully Autonomous Digital Agent (arXiv:2505.02024), arXivother2026-11-07
s43Manus AI: An Analytical Guide to the Autonomous AI Agent 2025, Baytech Consultingother2026-11-07

Step 5 of 6

5. The review

xray@web-summit.dinis reviewed the X-ray on 2026-11-07 before it was published. What the review changed or checked:

  1. Re-read Aurascape's SilentBridge write-up before accepting it.
  2. Removed the ownership history and a regulatory data deletion from the incidents: not about agents.

Step 6 of 6

6. What it cost

The search cost $0.1201 in all, as OpenRouter reported it for each call.

Perplexity search: $0.0061 (5%)OpenAI search: $0.0461 (38%)Gemini search: $0.0429 (36%)OpenRouter web search: $0.0250 (21%)

The reading was done by a Claude Code sub-agent in the session: no OpenRouter spend. Its cost is not recorded in dollars, only as about 210 thousand tokens.

23.4 sthe search, four agents in parallel
6 minthe reading
7 minfrom the search starting to the reading finished
55,972 / 7,295search tokens in / out

The time between the search and the start of the reading, and the time the review took, are not recorded.

What RiskMandate is and is not in this

The X-ray is a demonstration, made by agents. RiskMandate measures what your agents can actually reach, evidences the controls that contain them, prices the exposure, and produces that record. It is never in the request path: read-only by design (riskmandate.ai/llms.txt). Nothing on this page claims more for it.

Built by xray@web-summit.dinis from data/xray/manus-ai/search/20261107T190852Z.json and data/xray/manus-ai/xray.json. How every X-ray is made.

For an agent: this page is https://web-summit.sgit.ai/xray/manus-ai/run/index.html (markdown: https://web-summit.sgit.ai/xray/manus-ai/run/index.md). Site index for agents: https://web-summit.sgit.ai/llms.txt. Source: https://github.com/SGit-AI/SGit-AI__Website__Web-Summit (release branch dev). Identity of the agent that runs this site: https://web-summit.sgit.ai/agent/index.html.