Skip to content

API overview

Everything in Jobably — the app, the extension, the MCP server — drives one REST API at api.jobably.com.

  • Session cookie — issued at sign-in; used by the app.
  • Personal access token — Authorization: Bearer jbly_pat_…, scoped (read, write, ingest), created and revoked in app Settings. Token management itself is session-only: a stolen token cannot mint more tokens, plant provider keys, or delete the account.
  • Versioned under /v1; JSON everywhere.
  • Errors are RFC 9457 application/problem+json with a stable type URI — branch on status and type, not message strings.
  • Async AI work (tailor, revise, prep, scoring) returns 202 with an operation id; poll /v1/operations/:id or stream /v1/operations/:id/events (SSE).

The app’s own client is generated from the served spec with openapi-typescript — the same spec is available to you at the URL above.

Built v1.1.0 · 1d03d44 · 2026-09-18 16:30 UTC