API documentation is available at developers.zeroheight.com
Before you get started
- Authentication tokens belong to your team, making it easier to monitor token activity, manage creation, and revoke tokens as needed.
- While the Client ID can be shared, the Access Token should be treated with the same care as a password. If both your Client ID and Access Token are exposed, they could be exploited to access or modify your content on zeroheight. If you suspect a leak, revoke the token immediately.
- You can create and manage as many authentication tokens as needed, as often as necessary.
Token creation
To create a new authentication token, navigate to the Developers section in your organization's or workspace's settings. You’ll need to provide the following details:
- Token name: A descriptive name to help you easily identify the token.
- Use case: Choose pre-defined scopes tailored to your intended purpose (see the "Token use cases" section below for details).
- Granular token scopes: Pick specific CLI scopes for precise control over access levels and use case (available to Enterprise customers only).
Once created, take note of your Client ID and Access Token:
- The Access Token will only be displayed once, so make sure to save it securely.
- The Client ID will remain accessible in your organization’s or workspace’s settings.
Token use cases
Selecting a use case preselects the scopes that feature needs, so you don't have to pick them by hand. Each option is covered in Authentication tokens: choosing a use case, including which plan it's available on and where to find the setup guide.