Authentication
Updated
Send a workspace API key in the Authorization header with every decide request.
For a successful request, read answers.damaged.
The key identifies its workspace.
The header
- Header
Authorization: Bearer <your key>- Variable
SYSTEM_ZERO_API_KEY
Keep your key on your server. Calls belong to its workspace.
Call from your server over HTTPS. Calls from web pages are not accepted.
Plain HTTP returns 403 https_required.
See API reference for request fields and response headers.
Keys
Create and revoke keys under API keys in an active workspace. Copy the full key when it appears. The browser tab where you created it temporarily keeps it in memory for your first call. Reloading, leaving the console or signing out clears it.
There is no public workspace-selection header.
All roles can create keys and revoke their own keys. Owners and admins can revoke any key in the workspace. See Workspaces and keys.
Revocation
If a key is lost or exposed, revoke it and create a replacement. Update the apps that read it from SYSTEM_ZERO_API_KEY. Follow Leaked API keys for the replacement steps.
Refusals
| Status | Code | Action |
|---|---|---|
| 401 | Code: invalid_api_key | Use a valid RightNow decision model API key. |
| 403 | Code: auth_error | Replace the revoked or blocked key. |
| 403 | Code: account_suspended | Contact support about workspace access. |
Next: Send your first authenticated request with the Quickstart.