Authentication
All ZekronAI API requests are authenticated with a secret key sent as a Bearer token.
API keys
Create and manage keys from the API Keys page in your dashboard. Each key looks like zk_task_live_… and is displayed only at creation time. ZekronAI stores only a hashed version, so a lost key cannot be recovered — rotate it instead.
Sending the key
Include your key in the Authorization header on every request.
bash
curl https://api.zekron.tech/api/v1/task \
-H "Authorization: Bearer zk_live_xxx"Key controls
- Restrict a key to specific model categories (image, video, audio, tools).
- Set an optional per-key spend limit so a leaked key cannot drain your full balance.
- Disable or rotate a key instantly from the dashboard — revocation takes effect immediately.
Never embed your key in client-side code, mobile apps, or public repositories. Always call the ZekronAI API from a server you control.