API Authentication

API Keys

1. Go to Profile → API Keys
2. Click Generate New Key
3. Copy the key — it's only shown once
4. Use it in the Authorization header

Authorization: Bearer zephly_sk_abc123...

Security

• API keys are encrypted at rest using Fernet encryption
• Each key is scoped to your account
• Revoke keys instantly from the Profile page
• Rate limited: 100 requests/minute per key

JWT tokens

For frontend integrations, you can also use JWT tokens from the auth endpoints:

POST /api/v1/auth/login
{
  "email": "you@example.com",
  "password": "your-password"
}

Response:
{
  "access_token": "eyJ...",
  "token_type": "bearer",
  "expires_in": 86400
}