Manage enterprise API keys, granular permission scopes, client SDK authentication, and tenant environment profiles.
Authenticate your server backends with Secret Keys (zion_sk_live_...) or initialize frontends with ephemeral session tokens. Never expose secret keys in client-side code.
High-privilege keys (zion_sk_live_...) for server-side SDKs (Node.js, Python, cURL). Used to manage knowledge, perform backend chat completions, and mint ephemeral session tokens.
Low-privilege keys (zion_pk_live_...) designed to be safely placed in client-side websites and mobile apps to identify your tenant account and launch the Zion Copilot widget.
Short-lived signed tokens (zion_ep_..., 10m–60m TTL) minted by your backend via /v1/assistants/[id]/voice/session to grant the user audio or copilot streaming permissions securely.