API keys
API keys are created and managed in the Esnad dashboard, not via the public REST API. Create a key while the correct company is active (see Multiple companies). The raw key is shown only once.
What integrators need
- Create a sandbox or production key once in the dashboard (shown only at creation).
- Send it on every API request:
Authorization: Bearer zatca_test_…orzatca_live_…. - Use the key for invoicing, EGS setup, and reference data — see Invoices and EGS units.
To verify a key without listing or managing keys, use GET /v1/auth/context. Full auth details: Authentication