Authentication

Every endpoint that touches your account requires an API key in the request header. The product catalog (GET /v1/products) is public and needs no credentials.

X-API-Key: YOUR_KEY_HERE

Authorization: Bearer is accepted as an equivalent alternative:

Authorization: Bearer YOUR_KEY_HERE

Key format

A key is issued as zn_ followed by 48 random characters — 51 characters in total. After creation the Console only keeps a masked prefix such as zn_xxxxxxxxx…****, so you can tell keys apart.

Keys issued earlier with the ck_ prefix stay valid; there is nothing to migrate.

Confirm which key you are using

GET /v1/api-key

Returns the id, masked prefix, last-used and created timestamps of the newest active key on the account — not an inventory. See Account & Balance for the full response and Security for how many keys an account can hold.

Keep your key safe

Manage your keys in the Console under API Center — create, regenerate or delete. A plaintext value is shown only once, at the moment it is created or regenerated, so save it immediately.