I still would advise against using a top level array. It's just too easy that a CORS <script> gets injected somewhere else and your servers don't recognize it.
If your data looks like:
There should be no problems. We do this on about 20 apps at the moment. Are you sure your JSON is valid? What problem are you having exactly?