Jelliu API documentation

{
  "data": [
    {
      "id": "make",
      "name": "Make",
      "serverUrl": "https://eu1.make.com/mcp/stateless",
      "hostnames": [
        "eu1.make.com",
        "eu2.make.com",
        "us1.make.com",
        "us2.make.com",
        "eu1.make.celonis.com",
        "us1.make.celonis.com"
      ],
      "transport": "STREAMABLE_HTTP",
      "approvalMode": "no_approval",
      "tokenPathPattern": {},
      "requiresExplicitUrl": true,
      "configUrl": "https://developers.make.com/mcp-server/connect-using-mcp-token",
      "docsUrl": "https://developers.make.com/mcp-server",
      "description": "The automations this business has already built in Make, callable as tools. Each one is a scenario its owner published on purpose, so calling it does what they set it up to do."
    },
    {
      "id": "zapier",
      "name": "Zapier",
      "serverUrl": "https://mcp.zapier.com/api/v1/connect",
      "hostnames": [
        "mcp.zapier.com"
      ],
      "transport": "STREAMABLE_HTTP",
      "approvalMode": "no_approval",
      "tokenQueryParam": "token",
      "configUrl": "https://mcp.zapier.com",
      "docsUrl": "https://docs.zapier.com/mcp",
      "description": "Actions in the apps this business has connected through Zapier (CRM, calendar, email, spreadsheets, messaging, and thousands more)."
    },
    {
      "id": "alegra",
      "name": "Alegra",
      "serverUrl": "https://mcp.alegra.com/mcp",
      "hostnames": [
        "mcp.alegra.com"
      ],
      "transport": "STREAMABLE_HTTP",
      "approvalMode": "no_approval",
      "authScheme": "basic",
      "defaultHeaders": {
        "mcp-groups": "invoices,items,contacts,banks,income-payments,resolutions,currencies,sellers,taxes,retentions,reports,ledger,accounting,support-center"
      },
      "configUrl": "https://app.alegra.com/configuration/api",
      "docsUrl": "https://developer.alegra.com/reference/mcpexecute",
      "description": "The accounting system of this business: invoices, quotations, products, contacts, payments received, bank accounts and financial reports."
    }
  ]
}

The content is static and identical for every workspace; it changes only with a Jelliu release. Nothing in it is secret.

Idempotency. Read-only and safe to retry.

Access

Required scope: read (or write). Any workspace role.
Rate limit: General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. See Rate limits.
Plan: Available on every plan.

Returns the catalogue of hosted MCP providers a workspace can connect with a single token (currently Make, Zapier and Alegra, in that order): their endpoint, recognised hostnames, transport, default approval mode, auth scheme, where the token is minted and the description the agent receives. Use it to build a "connect provider" screen, then call `POST /api/mcp-servers` with `provider` and `secretToken`. The content is static and identical for every workspace; it changes only with a Jelliu release. Nothing in it is secret. **Idempotency.** Read-only and safe to retry. **Access** - **Required scope:** `read` (or `write`). Any workspace role. - **Rate limit:** General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace. See [Rate limits](/rate-limits). - **Plan:** Available on every plan.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Response

The provider catalogue.

datalist of objects

Errors

401

Unauthorized Error

403

Forbidden Error

429

Too Many Requests Error

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes