Jelliu API documentation

curl -X POST https://api.jelliu.co/api/exports \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "type": "calls",
  "format": "csv",
  "filters": {
    "date_from": "2026-09-01T00:00:00Z",
    "date_to": "2026-09-14T23:59:59Z",
    "campaign_id": "0b3e7c52-8d4f-4a11-b2c9-5e6f7a8b9c0d",
    "outcome": "interested"
  }
}'

{
  "data": {
    "id": "5e4d3c2b-1a09-4f8e-9d7c-6b5a4f3e2d1c",
    "tenant_id": "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d",
    "user_id": "user_2kLmNoPqRsTuVwXyZ",
    "type": "calls",
    "format": "csv",
    "status": "pending",
    "filters": {
      "campaign_id": "0b3e7c52-8d4f-4a11-b2c9-5e6f7a8b9c0d",
      "date_from": "2026-09-01T00:00:00Z",
      "date_to": "2026-09-14T23:59:59Z",
      "outcome": "interested"
    },
    "row_count": null,
    "file_size_bytes": null,
    "file_url": null,
    "error": null,
    "started_at": null,
    "completed_at": null,
    "expires_at": null,
    "created_at": "2026-09-14T15:10:01.995Z"
  }
}

Queues an asynchronous export and returns the job right away with status: pending and HTTP 202. Poll GET /api/exports/{id} until status is completed, then stream the file from GET /api/exports/{id}/download. The file can be downloaded for 72 hours after completion.

Each type accepts only some filters. A filter the type cannot apply is rejected with 400, never silently ignored:

calls: date_from, date_to (on started_at), campaign_id, agent_id, status, outcome
contacts: date_from, date_to, campaign_id, agent_id (through the contact’s campaign), status
conversations: date_from, date_to, agent_id, status
analytics: date_from, date_to, campaign_id, agent_id, status
agent_actions: date_from, date_to, agent_id, status (the action outcome: success, error, denied, timeout or indeterminate)
audit_log: date_from, date_to

A file holds at most 100,000 rows, newest first. A larger result completes anyway, with error set to Results truncated to 100000 rows. Phone numbers and PII in call summaries are masked. In CSV files, cells starting with =, +, -, @, tab or CR are prefixed with ' so spreadsheets do not run them as formulas.

Side effects. Inserts a job and enqueues it for a background worker. Up to 3 jobs per workspace can be pending or processing at once. When the job finishes, the requesting user gets an in-app notification (export ready, or export failed). Written to the audit log as export.create.

Idempotency. Not idempotent. Retrying after a timeout creates a second job, which also takes one of the 3 in-progress slots. Before retrying, check GET /api/exports for a job created a moment ago with the same type.

Webhook events. Emits audit.log_recorded to webhooks subscribed to it. No event is sent when the export completes. See Webhooks.

Access

Required scope: write. audit_log and agent_actions need full, and human users need the owner or admin role for those two types.
Rate limit: General API (120–600 requests/min per workspace, by plan) plus the configuration-mutations limit — 10 requests/min per workspace, shared with other configuration changes. See Rate limits.
Plan: Requires the reportExport plan feature. Every plan includes it today, including workspaces without an active plan, so this gate currently refuses nobody.

Queues an asynchronous export and returns the job right away with `status: pending` and HTTP `202`. Poll `GET /api/exports/{id}` until `status` is `completed`, then stream the file from `GET /api/exports/{id}/download`. The file can be downloaded for 72 hours after completion. Each type accepts only some filters. A filter the type cannot apply is rejected with `400`, never silently ignored: - `calls`: `date_from`, `date_to` (on `started_at`), `campaign_id`, `agent_id`, `status`, `outcome` - `contacts`: `date_from`, `date_to`, `campaign_id`, `agent_id` (through the contact's campaign), `status` - `conversations`: `date_from`, `date_to`, `agent_id`, `status` - `analytics`: `date_from`, `date_to`, `campaign_id`, `agent_id`, `status` - `agent_actions`: `date_from`, `date_to`, `agent_id`, `status` (the action outcome: `success`, `error`, `denied`, `timeout` or `indeterminate`) - `audit_log`: `date_from`, `date_to` A file holds at most 100,000 rows, newest first. A larger result completes anyway, with `error` set to `Results truncated to 100000 rows`. Phone numbers and PII in call summaries are masked. In CSV files, cells starting with `=`, `+`, `-`, `@`, tab or CR are prefixed with `'` so spreadsheets do not run them as formulas. **Side effects.** Inserts a job and enqueues it for a background worker. Up to 3 jobs per workspace can be `pending` or `processing` at once. When the job finishes, the requesting user gets an in-app notification (export ready, or export failed). Written to the audit log as `export.create`. **Idempotency.** Not idempotent. Retrying after a timeout creates a second job, which also takes one of the 3 in-progress slots. Before retrying, check `GET /api/exports` for a job created a moment ago with the same type. **Webhook events.** Emits `audit.log_recorded` to webhooks subscribed to it. No event is sent when the export completes. See [Webhooks](/webhooks). **Access** - **Required scope:** `write`. `audit_log` and `agent_actions` need `full`, and human users need the owner or admin role for those two types. - **Rate limit:** General API (120–600 requests/min per workspace, by plan) plus the configuration-mutations limit — 10 requests/min per workspace, shared with other configuration changes. See [Rate limits](/rate-limits). - **Plan:** Requires the `reportExport` plan feature. Every plan includes it today, including workspaces without an active plan, so this gate currently refuses nobody.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Request

Unknown top-level keys and unknown filter keys are ignored.

typeenumRequired

The data set to export. calls: one row per call. contacts: campaign contacts. conversations: WhatsApp and webchat threads. analytics: daily aggregates per campaign. agent_actions: one row per tool an agent invoked (owner/admin only). audit_log: the audit trail, including changes (owner/admin only).

The data set to export. `calls`: one row per call. `contacts`: campaign contacts. `conversations`: WhatsApp and webchat threads. `analytics`: daily aggregates per campaign. `agent_actions`: one row per tool an agent invoked (owner/admin only). `audit_log`: the audit trail, including `changes` (owner/admin only).

formatenumOptionalDefaults to csv

File format. csv with a header row, json as a single pretty-printed array, or jsonl with one JSON object per line (best for very large files and SIEM ingestion).

Allowed values:

filtersobjectOptionalDefaults to {}

Optional filters, combined with AND. Only the filters listed for the chosen type are allowed; empty strings count as not sent.

Response

The job was queued. It starts pending.

dataobject

An asynchronous export job, as stored (snake_case). Created by POST /api/exports.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

429

Too Many Requests Error

Each type accepts only some filters. A filter the type cannot apply is rejected with 400, never silently ignored:

calls: date_from, date_to (on started_at), campaign_id, agent_id, status, outcome
contacts: date_from, date_to, campaign_id, agent_id (through the contact’s campaign), status
conversations: date_from, date_to, agent_id, status
analytics: date_from, date_to, campaign_id, agent_id, status
agent_actions: date_from, date_to, agent_id, status (the action outcome: success, error, denied, timeout or indeterminate)
audit_log: date_from, date_to

Webhook events. Emits audit.log_recorded to webhooks subscribed to it. No event is sent when the export completes. See Webhooks.

Access

Required scope: write. audit_log and agent_actions need full, and human users need the owner or admin role for those two types.
Rate limit: General API (120–600 requests/min per workspace, by plan) plus the configuration-mutations limit — 10 requests/min per workspace, shared with other configuration changes. See Rate limits.
Plan: Requires the reportExport plan feature. Every plan includes it today, including workspaces without an active plan, so this gate currently refuses nobody.