> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zynfo.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys

> Create, limit and revoke the keys that let AI tools and scripts read your ZynfoAI workspace, and see the apps you connected with one click.

An API key lets one tool or script read your workspace without signing in. Owners and admins manage
keys in **Settings → API keys**. Creating a key needs the **Pro plan or the 7-day trial**.

## Create a key

1. Click **New key**.
2. Enter a **Name** that says what will use it, such as "Claude Code" or "Reporting script".
3. Tick what the key **can** do. See the permissions below.
4. Choose an **Expiry**: **Never expires**, **30 days**, **90 days** or **1 year**.
5. Click **Create key**.
6. Copy the key and click **I've copied it**. It starts with `zk_live_`.

**You see the full key only once.** ZynfoAI stores a one-way fingerprint of it, so it can't show it to
you again. If you lose it, revoke it and create another.

A workspace can have up to 20 active keys.

## Permissions

| Permission | What it allows |
| - | - |
| Search the knowledge base | Find passages in your knowledge base |
| Read tickets | List and open tickets |
| Read leads | List leads |
| Read contacts | List and search contacts |
| Read conversations | List conversations and read their messages |
| Read plan usage | See your plan, AI replies used and knowledge sources |
| Ask the AI agent (uses AI replies) | Ask your AI agent a question. Each question uses one AI reply |

Keys are read-only. No permission lets a tool change your workspace. A key can't be changed after you
create it. To give a tool different permissions, create a new key and revoke the old one.

## Where keys show

The list shows each key's name, the first characters of the key, how many permissions it has, when it
was last used and when it expires. Keys that expired or were revoked are not listed.

## Revoke a key

1. Click the bin button next to the key, named **Revoke** and the key's name.
2. Click **Revoke key** to confirm.

The key stops working at once, and this can't be undone. Revoking works on every plan, so you can
always switch a key off.

## Apps you connected with one click

Apps you connected by signing in, such as Claude on the web or ChatGPT, are listed under **Connected
apps**. Click **Disconnect** next to one to cut its access at once. See
[Connect Claude, ChatGPT or Perplexity](/api-and-mcp/claude-and-chatgpt).

## Keep keys safe

* Treat a key like a password. Don't paste it into a chat, an email or public code.
* Use one key for each tool, so you can revoke one without breaking the others.
* Set an expiry on keys you only need for a while.
* If a key may have leaked, revoke it right away.

## When your plan changes

API access is part of the Pro plan and the trial. If the workspace moves to Starter or Free, every key
and connected app stops working straight away. They are kept, and they work again when the workspace is
back on Pro. You can still revoke keys and disconnect apps on any plan.

## Related topics

* [Connect AI agents to ZynfoAI](/api-and-mcp/overview)
* [REST API](/api-and-mcp/rest-api)
* [Team members and roles](/settings/team)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.