# JayBase. Agent setup

This origin is JayBase. It is a current-state workspace on a JayBase store. Aim a client at https://app.jaybase.ai/llm.txt.

An agent connection is a live API/writer credential on the JayBase (a current writer token). It is not a linked Magpie, Martin, or Grok app. Opening this page does not create a connection.

Do not use MCP. JayBase does not offer /mcp. A new inventory (or any other) tool should be a CLI on the same JayBase store, not a new MCP endpoint.

## Connect

JayBase is the source of truth. Magpie and Martin are the public CLIs on this store. JayBase is the workspace.

```sh
export JAYBASE_URL='https://app.jaybase.ai'
export JAYBASE_TOKEN='writer-token-for-this-store'
```

- JAYBASE_URL is an HTTPS origin only (no path, token, query, or fragment).
- JAYBASE_TOKEN lives only in the environment. Never put it in a flag, URL, payload, log, or prompt.
- This is the JayBase writer/reader token (32-512 characters). It is not a JayBase UI password, not an MCP bearer (MAGPIE_MCP_TOKEN), and not a workspace registry id.
- Workspace ids look like agt_… / ten_… / usr_… and are exactly 20 characters. JayBase rejects anything under 32 characters with 401 valid bearer token required. If the value you were given is 20 characters, it is the wrong secret.
- JayBase does not display this token on the standing Agents page. After you sign in, mint a reader or writer at https://app.jaybase.ai/account/agents. JayBase shows the plaintext once on that POST, then never again. This is not writer-initial from jaybase-server init, not a JayBase password, and not an MCP bearer.
- Operators can still mint on the store host with add-token if the one-time reveal was lost:
```sh
jaybase-server add-token /path/to/secrets/auth.json agent-writer writer
```
Then export the printed token as JAYBASE_TOKEN. Recreate the JayBase process so it reloads auth.json. Do not put the new token in this prompt.

Prove the store:

```sh
curl -fsS "$JAYBASE_URL/health/ready"
curl -fsS -H "Authorization: Bearer $JAYBASE_TOKEN" "$JAYBASE_URL/v1/root"
```

Ready must be JayBase JSON ({"status":"ready"}). If you see the workspace UI ready JSON instead, you pointed JAYBASE_URL at the UI host. The UI is https://app.jaybase.ai. The operator/bootstrap store is https://app.jaybase.ai.

If TLS verification fails, fetch the host CA from https://app.jaybase.ai/folio-jaybase-ca.crt and pass it to curl --cacert. The file is still served as folio-jaybase-ca.crt.

## Workspace stores

Each customer workspace is an isolated JayBase. A token minted at https://app.jaybase.ai/account/agents is valid only on that workspace origin. It returns 401 against the operator store above.

### future-perfect

```sh
export JAYBASE_URL='https://future-perfect.app.jaybase.ai'
export JAYBASE_TOKEN='writer-token-minted-at-https://app.jaybase.ai/account/agents'
```

```sh
curl -fsS "$JAYBASE_URL/health/ready"
curl -fsS -H "Authorization: Bearer $JAYBASE_TOKEN" "$JAYBASE_URL/v1/root"
```

- GET /health/ready is unauthenticated. Expect {"status":"ready"}.
- GET /v1/root requires Authorization: Bearer $JAYBASE_TOKEN (writer or reader minted for this store).
- If TLS verification fails, fetch the host CA from https://app.jaybase.ai/folio-jaybase-ca.crt and pass it to curl --cacert. The file is still served as folio-jaybase-ca.crt.

### future-perfect-prod

```sh
export JAYBASE_URL='https://future-perfect-prod.app.jaybase.ai'
export JAYBASE_TOKEN='writer-token-minted-at-https://app.jaybase.ai/account/agents'
```

```sh
curl -fsS "$JAYBASE_URL/health/ready"
curl -fsS -H "Authorization: Bearer $JAYBASE_TOKEN" "$JAYBASE_URL/v1/root"
```

- GET /health/ready is unauthenticated. Expect {"status":"ready"}.
- GET /v1/root requires Authorization: Bearer $JAYBASE_TOKEN (writer or reader minted for this store).
- If TLS verification fails, fetch the host CA from https://app.jaybase.ai/folio-jaybase-ca.crt and pass it to curl --cacert. The file is still served as folio-jaybase-ca.crt.


## Spaces

JayBase Spaces are the types on this JayBase. Magpie is the books CLI. Martin is the CRM CLI. Point either CLI at JAYBASE_URL and JAYBASE_TOKEN. Install only what you need.

```sh
magpie --actor owner state
martin --actor owner state
```

Do not pass --store when JAYBASE_URL is set. --actor is a domain identity, not authentication.

The historical binary name folio is not a public command.

## Humans

Sign in at https://app.jaybase.ai/login. Source: https://app.jaybase.ai/source.