Jelliu API documentation

curl -X PATCH https://api.jelliu.co/api/mcp-servers/6b5a4c3d-2e1f-4a0b-9c8d-7e6f5a4b3c2d \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "secretToken": "sk_eltornillo_rotado_7a1d"
}'

{
  "data": {
    "id": "3c2b1a09-8f7e-4d6c-b5a4-938271605f4e",
    "tenant_id": "0e9d7c3b-8a1f-4c55-b7a2-3c4d5e6f7a8b",
    "agent_id": null,
    "name": "Zapier",
    "description": "Actions in the apps this business has connected through Zapier.",
    "server_url": "https://mcp.zapier.com/api/v1/connect",
    "approval_mode": "fine_grained",
    "transport": "STREAMABLE_HTTP",
    "provider": "zapier",
    "created_at": "2026-09-14T15:02:11.000Z",
    "updated_at": "2026-09-15T09:18:40.000Z",
    "deleted_at": null,
    "toolOverrides": {
      "execute_zapier_read_action": "auto_approved",
      "execute_zapier_write_action": "requires_approval"
    }
  },
  "toolOverridesSync": {
    "synced": 2,
    "removed": 0,
    "failed": 0,
    "failures": []
  }
}

Partial update: only the fields you send change, and at least one must be sent. Use it to rotate a token, change the approval policy or per-tool decisions, or fix a wrong transport.

Changing serverUrl, name, description or transport re-registers the server with the voice engine (the provider cannot edit those in place): a new registration is created, every agent that uses the server is repointed, the old registration is deleted, and every per-tool decision is re-applied. Its voice-engine registration id changes; the Jelliu id and the agent assignments do not. Changing only secretToken, customHeaders or approvalMode updates the existing registration.

For a server on a hosted provider’s host, a different transport and a null secretToken are refused with 400; a token pasted in a provider URL is moved into the secret, and a wrong stored transport is corrected. toolOverrides replaces all per-tool decisions and follows the create rules, checked against the state the server will end up in: switching approvalMode away from fine_grained while decisions remain is refused. Only one change per server runs at a time; a concurrent update gets 409. Per-agent gateway rows managed by the platform answer 404.

Side effects. Updates or re-registers the server in the voice engine before recording anything, repoints agents on re-registration, and pushes per-tool decisions. Writes an mcp.manage audit entry.

Idempotency. Safe to retry with the same body: values equal to the stored ones do not re-register. A retry after a 502 on per-tool decisions only re-pushes the decisions.

Webhook events. audit.log_recorded for the audit entry, if you subscribe to it. See Webhooks.

Access

Required scope: write. Any workspace role.
Rate limit: General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace, checked by two counters of the same size. See Rate limits.
Plan: Available on every plan.

Partial update: only the fields you send change, and at least one must be sent. Use it to rotate a token, change the approval policy or per-tool decisions, or fix a wrong transport. Changing `serverUrl`, `name`, `description` or `transport` re-registers the server with the voice engine (the provider cannot edit those in place): a new registration is created, every agent that uses the server is repointed, the old registration is deleted, and every per-tool decision is re-applied. Its voice-engine registration id changes; the Jelliu `id` and the agent assignments do not. Changing only `secretToken`, `customHeaders` or `approvalMode` updates the existing registration. For a server on a hosted provider's host, a different `transport` and a `null` `secretToken` are refused with 400; a token pasted in a provider URL is moved into the secret, and a wrong stored transport is corrected. `toolOverrides` replaces all per-tool decisions and follows the create rules, checked against the state the server will end up in: switching `approvalMode` away from `fine_grained` while decisions remain is refused. Only one change per server runs at a time; a concurrent update gets 409. Per-agent gateway rows managed by the platform answer 404. **Side effects.** Updates or re-registers the server in the voice engine before recording anything, repoints agents on re-registration, and pushes per-tool decisions. Writes an `mcp.manage` audit entry. **Idempotency.** Safe to retry with the same body: values equal to the stored ones do not re-register. A retry after a `502` on per-tool decisions only re-pushes the decisions. **Webhook events.** `audit.log_recorded` for the audit entry, if you subscribe to it. See [Webhooks](/webhooks). **Access** - **Required scope:** `write`. Any workspace role. - **Rate limit:** General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace, checked by two counters of the same size. See [Rate limits](/rate-limits). - **Plan:** Available on every plan.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Path parameters

mcpServerIdstringRequiredformat: "uuid"

UUID of the MCP server registration. It must belong to the authenticated workspace; an id from another workspace answers 404, exactly like an unknown one. Returned as id by GET /api/mcp-servers.

Request

Unknown keys are ignored. Empty or whitespace-only strings are treated as absent. At least one field is required.

namestringOptional1-200 characters

New display name, trimmed. Re-registers the server.

descriptionstring or nullOptional<=2000 characters

New agent-facing description; null clears it. Re-registers the server.

serverUrlstringOptionalformat: "uri"<=2000 characters

New MCP endpoint (http/https). Must not target private/internal addresses. Re-registers the server.

secretTokenstring or nullOptional<=2000 characters

New credential, stored encrypted; null clears it (refused for hosted providers).

customHeadersmap from strings to stringsOptional

Replaces all custom headers (at most 20). Stored encrypted and never returned.

approvalModeenumOptional

New approval policy (always_ask, fine_grained or no_approval).

Allowed values:

transportenumOptional

New transport (SSE or STREAMABLE_HTTP). Re-registers the server; hosted providers accept only theirs.

Allowed values:

toolOverridesmap from strings to enumsOptional

Replaces all per-tool decisions (auto_approved or requires_approval, keyed by tool name). Only with fine_grained (sent or stored); at most 50; disabled is rejected. Send {} to clear them.

Allowed values:

Response

Updated. toolOverridesSync is present when decisions were pushed or re-applied.

dataobject

A single MCP server as returned by the create, retrieve and update endpoints: the summary fields plus deleted_at and the applied per-tool decisions. secret_token and custom_headers are never returned.

toolOverridesSyncobjectOptional

What happened when per-tool decisions were pushed to the voice engine. Present only when decisions were sent, or re-applied after a re-registration or cleanup of legacy values.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

409

Conflict Error

429

Too Many Requests Error

502

Bad Gateway Error

Partial update: only the fields you send change, and at least one must be sent. Use it to rotate a token, change the approval policy or per-tool decisions, or fix a wrong transport.

Idempotency. Safe to retry with the same body: values equal to the stored ones do not re-register. A retry after a 502 on per-tool decisions only re-pushes the decisions.

Webhook events. audit.log_recorded for the audit entry, if you subscribe to it. See Webhooks.

Access

Required scope: write. Any workspace role.
Rate limit: General API — 120 (Starter), 200 (Growth), 300 (Business) or 600 (Enterprise) requests/min per workspace, checked by two counters of the same size. See Rate limits.
Plan: Available on every plan.