Skip to content

Article

Jev on Fly.io Sprites

Fly.io's TypeSafeAI connector gives Sprites access to Jev without the API key entering the machine: the Sprites gateway attaches the organization's encrypted key, and each Sprite sets only TYPESAFE_BASE_URL plus a placeholder key.
Format
Article
Reading time
3 min
Published by
Community
Author
Fly.io
Last verified
Oct 2026

Highlights

  • Add the connector under Sprites, then Connectors; the key is checked against TypeSafe, encrypted at rest, and never shown again.
  • A new connector refuses every Sprite until access is granted by name prefix, by labels, or for the whole organization.
  • Set TYPESAFE_BASE_URL to the connector URL and TYPESAFE_API_KEY to any placeholder; the gateway adds the real key on the way out.
  • Sprites can reach POST /v1/systemone and GET /v1/models only; every other TypeSafe path or method is rejected with a 403.
  • The gateway passes 429 and 529 responses and the retry-after header back, and the TypeSafe SDKs retry on their own schedule.

Watch out

A vendor page, so the security framing is Fly.io's own: it notes Jev does not treat state text as hostile, meaning a crafted ticket can move a decision, and recommends network allowlists, checkpoints, and Firecracker microVM isolation to contain that. Pricing is not stated, and the connector needs Fly.io plus a TypeSafe key.

Questions about this entry

Short answers drawn from the linked project or page.

Reactions & coverage

Posts, threads, and videos about this entry from around the web.

X: Jev 1.14 is now on OpenRouter

X: Jev lands on the Vercel AI Gateway

X: Jev as an LLM guardrail inside Agentgateway

YouTube: Greg Isenberg and Ryan Vogel on the businesses Jev unlocks, and a path in through the Vercel AI Gateway.

From the Jev guides

Original write-ups on what this entry is for.

From the Jev AI model community

Posts from builders shipping with Jev right now.

Follow @typesafeai