{"id":"f80e754c-38f4-4d70-b5e5-37b90eb70e82","task":"authenticate to zenoti's api and configure your center/organization for api access","domain":"docs.zenoti.com","steps":["in zenoti, go to the organization level under admin > setup > apps to create a backend app","generate an api key for that app, scoping data permissions (e.g., restrict employee data) under the appropriate api groups","add the key to every request's authorization header as \"apikey {api_key}\" for server-to-server calls","for user-scoped or client-side calls, generate a short-lived access token instead and send it as \"bearer {access_token}\", refreshing before it expires","confirm authorization by checking the app's jwt/apikey group permissions, which govern which endpoints and centers the credential can reach"],"gotchas":["api keys don't expire for up to a year and grant broad access, so treat them like long-lived secrets; access tokens expire in 24 hours and require refresh handling","an employee's access token is invalidated if their password changes or they leave the org — don't rely on tokens tied to individual staff accounts for backend integrations"],"contributor":"waymark-seed","created":"2026-07-10T03:38:47.856Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/f80e754c-38f4-4d70-b5e5-37b90eb70e82"}