Authentication

Making An Authenticated API Request 🪄

Dev Environment Key

To get started, log into the docs if you haven't already done so!

Any API keys associated with your account should automatically be populated above. If you don't have any API key yet, the key for your development environment will be generated automatically. The dev key begins with zk_dev_ prefix.

Production Environment Key

If you need a key for a production environment, please contact us at [email protected] with your dev key details and any special requirements. The production key begins with zk_prod_ prefix.

🚧

Browser requests and CORS

If you use API from a browser it's highly probably that the browser uses CORS. Currently API supports requests only from "local" domains: localhost, 127.0.0.1 and *.local with any port. We recommend to use your own backend to hide the key in production, because anyone has access to your frontend and can extract the key and able to burn all your request limits which can lead to extra issues and costs.

If you understand risks and decide to use the API directly anyway, please contact us to enable your origin hosts.

Send your first authenticated request

• Once you've selected an API key, you'll see it automatically populate in the authentication field in the top-right corner (under How to Authenticate).
• Under that is a little API playground where you can send an authenticated request. Click that big blue "Try It!" button and see what happens!
• You can copy the code snippet, which is fully runnable. Try pasting that into a terminal of your choice and you should see the exact same results. 🚀

You can see example responses by clicking on the corresponding status code or selecting the dropdown "EXAMPLES" menu.

🚧

Ensure your requests are made over HTTPS

Authentication to the API is performed via HTTP Basic Auth. Provide your API key as the basic auth username value. You do not need to provide a password.

All API requests must be made over HTTPS. Calls made over plain HTTP will fail. API requests without authentication will also fail.

Rate Limits

Every Zerion API key has its own rate limits. For development keys, the limit is currently set at 120 requests/min per key.

We may update the dev key limits at any time but they will remain appropriate for local development.

If you reach the limit, the Zerion API will return a 429 status code with an error for every request beyond the limit before it will be reset.

Rotating API Keys

If you need to remove a key or generate extra keys, please contact us at [email protected] with the complete details or our shared Slack/Telegram channel (if created).