Authentication

All ZekronAI API requests are authenticated with a secret key sent as a Bearer token.

API keys

Create and manage keys from the API Keys page in your dashboard. Each key looks like zk_task_live_… and is displayed only at creation time. ZekronAI stores only a hashed version, so a lost key cannot be recovered — rotate it instead.

Sending the key

Include your key in the Authorization header on every request.

bash
curl https://api.zekron.tech/api/v1/task \
  -H "Authorization: Bearer zk_live_xxx"

Key controls

  • Restrict a key to specific model categories (image, video, audio, tools).
  • Set an optional per-key spend limit so a leaked key cannot drain your full balance.
  • Disable or rotate a key instantly from the dashboard — revocation takes effect immediately.
Never embed your key in client-side code, mobile apps, or public repositories. Always call the ZekronAI API from a server you control.