Jelliu API documentation

{
  "data": [
    {
      "id": "3c2b1a09-8f7e-4d6c-b5a4-938271605f4e",
      "tenant_id": "0e9d7c3b-8a1f-4c55-b7a2-3c4d5e6f7a8b",
      "agent_id": null,
      "name": "Zapier",
      "description": "Actions in the apps this business has connected through Zapier.",
      "server_url": "https://mcp.zapier.com/api/v1/connect",
      "approval_mode": "no_approval",
      "transport": "STREAMABLE_HTTP",
      "provider": "zapier",
      "created_at": "2026-09-14T15:02:11.000Z",
      "updated_at": "2026-09-14T15:02:11.000Z"
    },
    {
      "id": "6e5d4c3b-2a19-4807-b6f5-e4d3c2b1a098",
      "tenant_id": "0e9d7c3b-8a1f-4c55-b7a2-3c4d5e6f7a8b",
      "agent_id": null,
      "name": "Inventario Ferretería El Tornillo",
      "description": "Consulta de existencias y precios por referencia.",
      "server_url": "https://mcp.eltornillo.com.co/mcp",
      "approval_mode": "fine_grained",
      "transport": "STREAMABLE_HTTP",
      "created_at": "2026-09-11T09:30:00.000Z",
      "updated_at": "2026-09-12T16:45:10.000Z"
    }
  ]
}

Returns the MCP servers the workspace manages, newest first by created_at. Excluded: the platform’s per-agent gateway rows (see GET /api/agents/{agentId}/mcp-servers) and the connected-apps tool surface managed under Integrations. Credentials, custom headers and per-tool decisions are never included; GET /api/mcp-servers/{mcpServerId} adds toolOverrides.

Offset pagination with limit and offset. The response has no pagination metadata: request the next page until one comes back with fewer than limit items. See Pagination.

Consistency. Pages are cached for up to 5 minutes; creating, updating, deleting or (un)assigning a server clears them before responding.

Idempotency. Read-only and safe to retry.

Access

Required scope: read (or write). Any workspace role.
Rate limit: General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. The limit is checked by two counters of the same size, so the effective budget is still the plan’s number. See Rate limits.
Plan: Available on every plan.

Returns the MCP servers the workspace manages, newest first by `created_at`. Excluded: the platform's per-agent gateway rows (see `GET /api/agents/{agentId}/mcp-servers`) and the connected-apps tool surface managed under Integrations. Credentials, custom headers and per-tool decisions are never included; `GET /api/mcp-servers/{mcpServerId}` adds `toolOverrides`. Offset pagination with `limit` and `offset`. The response has no pagination metadata: request the next page until one comes back with fewer than `limit` items. See [Pagination](/pagination). **Consistency.** Pages are cached for up to 5 minutes; creating, updating, deleting or (un)assigning a server clears them before responding. **Idempotency.** Read-only and safe to retry. **Access** - **Required scope:** `read` (or `write`). Any workspace role. - **Rate limit:** General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. The limit is checked by two counters of the same size, so the effective budget is still the plan's number. See [Rate limits](/rate-limits). - **Plan:** Available on every plan.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Query parameters

limitintegerOptional1-100Defaults to 50

Maximum number of servers to return (1–100). Invalid values are rejected with 400, not clamped.

offsetintegerOptional0-100000Defaults to 0

Number of servers to skip (0–100000). Invalid values are rejected with 400.

Response

Workspace MCP servers, newest first.

datalist of objects

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

429

Too Many Requests Error

Offset pagination with limit and offset. The response has no pagination metadata: request the next page until one comes back with fewer than limit items. See Pagination.

Consistency. Pages are cached for up to 5 minutes; creating, updating, deleting or (un)assigning a server clears them before responding.

Idempotency. Read-only and safe to retry.

Access

Required scope: read (or write). Any workspace role.
Rate limit: General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. The limit is checked by two counters of the same size, so the effective budget is still the plan’s number. See Rate limits.
Plan: Available on every plan.