Authentication - Jelou AI Docs

Every deployed function is protected by default. Requests without a valid credential receive 401 Unauthorized.

Quick start

Deploy your function

jelou functions deploy
# ✓ Deployed
# ▸ URL: https://my-function.fn.jelou.ai

The deploy doesn’t generate any credential automatically. To call your function you need a platform API key (see the next step).

Call with your API key

Create an API key at apps.jelou.ai, in the app configuration section, and send it in the Authorization header:

curl -X POST https://my-function.fn.jelou.ai \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer sk_..." \
  -d '{"query": "test"}'

Successful response:

{ "results": [] }

Without an API key or with an invalid one:

{ "error": "Unauthorized", "message": "Missing or invalid auth token (use X-Jelou-Token or Authorization: Bearer)" }

How it works

Create a platform API key at apps.jelou.ai, in the app configuration section
Every request must include it in the Authorization: Bearer sk_... header
The SDK validates the key against the Jelou gateway, confirms it belongs to the same organization that owns the function, and caches the result in memory
If the key is valid, the request reaches your handler. Otherwise, it returns 401

API keys (recommended)

Creating new runtime tokens (jelou functions tokens create) is deprecated and responds 410 Gone. Deploys don’t generate one automatically either — the supported mechanism for authenticating functions, new or existing, is a platform API key.

Runtime tokens (jfn_rt_...) created before this migration are still validated via X-Jelou-Token (backwards compatible) and can be listed or revoked with jelou functions tokens list / jelou functions tokens revoke, but new ones can no longer be created and none are generated on new deploys.

Routes without authentication

The /__health and /openapi.json routes never require a credential. Cron triggers don’t either — the platform authenticates them automatically.

Usage examples

curl
Node.js
Python
Brain Studio (MCP)

curl -X POST https://my-function.fn.jelou.ai \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer sk_..." \
  -d '{"phone": "593987654321"}'

const res = await fetch("https://my-function.fn.jelou.ai", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": `Bearer ${process.env.JELOU_FUNCTION_API_KEY}`,
  },
  body: JSON.stringify({ phone: "593987654321" }),
});
const data = await res.json();

import requests
import os

res = requests.post(
    "https://my-function.fn.jelou.ai",
    headers={
        "Content-Type": "application/json",
        "Authorization": f"Bearer {os.environ['JELOU_FUNCTION_API_KEY']}",
    },
    json={"phone": "593987654321"},
)
data = res.json()

To connect your function as an external MCP server in Brain Studio:

URL: https://my-function.fn.jelou.ai/mcp
Header: Authorization → Bearer sk_...

See the Brain Studio guide for step-by-step instructions.

The platform does not validate anything — your code is responsible.

​Quick start

​How it works

​API keys (recommended)

​Routes without authentication

​Usage examples

Quick start

How it works

API keys (recommended)

Routes without authentication

Usage examples