Existing users and people with a current invitation can manage keys under API keys. Copy the full key when it appears; it cannot be shown again.
There is no public workspace-selection header.
All roles can create keys and revoke their own keys. Owners and admins can revoke any key in the workspace. See Workspaces and keys.
Revocation
If a key is lost or exposed, revoke it and create a replacement. Update the apps that read it from SYSTEM_ZERO_API_KEY. Follow Leaked API keys for the replacement steps.
Refusals
Status
Code
Action
401
Code: invalid_api_key
Use a valid System Zero API key.
403
Code: auth_error
Replace the revoked or blocked key.
403
Code: account_suspended
Contact support about workspace access.
While the API is unlisted, these access refusals return 404 unknown_endpoint.
Next: Send your first authenticated request with the Quickstart.