Authentication

Every /api/v1 request must include your personal API key.

Create a key

1. Sign in to Zog
2. Open Settings → API keys
3. Name the key and click Create key
4. Copy the secret immediately — it is shown once

Keys look like:

zog_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

You can keep up to 10 active keys. Revoke any key from Settings at any time.

Authorization header

Authorization: Bearer zog_sk_...

Example:

curl https://zog.watch/api/v1/uploads \
  -H "Authorization: Bearer $ZOG_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"filename":"photo.jpg","mimeType":"image/jpeg","sizeBytes":204800}'

Security notes

• Keys are stored as SHA-256 hashes — Zog never stores the full secret after creation
• Treat keys like passwords; prefer environment variables over hardcoding
• Revoke a key the moment a machine or repo is compromised
• Disabled accounts cannot use API keys

Errors