API keys

API keys are created and managed in the Esnad dashboard, not via the public REST API. Create a key while the correct company is active (see Multiple companies). The raw key is shown only once.

What integrators need

  • Create a sandbox or production key once in the dashboard (shown only at creation).
  • Send it on every API request: Authorization: Bearer zatca_test_… or zatca_live_….
  • Use the key for invoicing, EGS setup, and reference data — see Invoices and EGS units.

To verify a key without listing or managing keys, use GET /v1/auth/context. Full auth details: Authentication