[{"data":1,"prerenderedAt":1124},["ShallowReactive",2],{"docs-navigation":3,"docs-\u002Fdocs\u002Fkeys\u002Fapi-keys":313,"docs-\u002Fdocs\u002Fkeys\u002Fapi-keys-surround":1121},[4],{"title":5,"path":6,"stem":7,"children":8,"page":34},"Docs","\u002Fdocs","docs",[9,35,60,78,120,186,223,234,258,283],{"title":10,"description":11,"icon":12,"path":13,"stem":14,"children":15,"page":34},"Getting started","What Zaproo Search is, a quickstart, and wiring search into a storefront.","i-lucide-rocket","\u002Fdocs\u002Fgetting-started","docs\u002F1.getting-started",[16,22,28],{"title":17,"path":18,"stem":19,"description":20,"icon":21},"Introduction","\u002Fdocs\u002Fgetting-started\u002Fintroduction","docs\u002F1.getting-started\u002F1.introduction","What Zaproo Search is, the five things you work with, and how a product catalog becomes a search box on your shop.","i-lucide-book-open-text",{"title":23,"path":24,"stem":25,"description":26,"icon":27},"Quickstart","\u002Fdocs\u002Fgetting-started\u002Fquickstart","docs\u002F1.getting-started\u002F2.quickstart","From a new account to a first search request in six steps, with curl or from your AI agent.","i-lucide-zap",{"title":29,"path":30,"stem":31,"description":32,"icon":33},"Integrate a storefront","\u002Fdocs\u002Fgetting-started\u002Fstorefront","docs\u002F1.getting-started\u002F3.storefront","Build a search results page with facets and an autocomplete box on top of the search and suggest routes.","i-lucide-store",false,{"title":36,"description":37,"icon":38,"path":39,"stem":40,"children":41,"page":34},"Account and team","Sign-in, sessions, organizations, members, roles and projects.","i-lucide-users","\u002Fdocs\u002Faccount","docs\u002F2.account",[42,48,54],{"title":43,"path":44,"stem":45,"description":46,"icon":47},"Account and sign-in","\u002Fdocs\u002Faccount\u002Fsign-in","docs\u002F2.account\u002F1.sign-in","Create an account, verify your email, stay signed in, manage signed-in devices and change or reset your password.","i-lucide-log-in",{"title":49,"path":50,"stem":51,"description":52,"icon":53},"Organizations, members and roles","\u002Fdocs\u002Faccount\u002Forganizations","docs\u002F2.account\u002F2.organizations","What an organization holds, how to add members, and what owners, admins and members may do.","i-lucide-building-2",{"title":55,"path":56,"stem":57,"description":58,"icon":59},"Projects","\u002Fdocs\u002Faccount\u002Fprojects","docs\u002F2.account\u002F3.projects","Group the indices and API keys of one shop or one environment, and keep staging apart from production.","i-lucide-folder-kanban",{"title":61,"description":62,"icon":63,"path":64,"stem":65,"children":66,"page":34},"API keys and security","Secret and public keys, scopes, allowed origins, rate limits and errors.","i-lucide-key-round","\u002Fdocs\u002Fkeys","docs\u002F3.keys",[67,72],{"title":68,"path":69,"stem":70,"description":71,"icon":63},"API keys","\u002Fdocs\u002Fkeys\u002Fapi-keys","docs\u002F3.keys\u002F1.api-keys","Secret and public keys, full and read access, index scope, allowed origins, expiry, and how to revoke a key.",{"title":73,"path":74,"stem":75,"description":76,"icon":77},"Rate limits and errors","\u002Fdocs\u002Fkeys\u002Frate-limits","docs\u002F3.keys\u002F2.rate-limits","How many requests each route accepts per minute, what a 429 looks like, the error format and every error code with its HTTP status.","i-lucide-gauge",{"title":79,"description":80,"icon":81,"path":82,"stem":83,"children":84,"page":34},"Indexing","Indices, languages, mappings, documents, tasks, full catalog sync and reindexing.","i-lucide-database","\u002Fdocs\u002Findexing","docs\u002F4.indexing",[85,90,96,102,108,114],{"title":86,"path":87,"stem":88,"description":89,"icon":81},"Indices and languages","\u002Fdocs\u002Findexing\u002Findices","docs\u002F4.indexing\u002F1.indices","Create an index, pick its language, read its status, and change the language later with a reindex.",{"title":91,"path":92,"stem":93,"description":94,"icon":95},"Mapping and fields","\u002Fdocs\u002Findexing\u002Fmapping","docs\u002F4.indexing\u002F2.mapping","Field types, the five flags that decide what a field is used for, text analysis options, unmapped fields, and which changes need a reindex.","i-lucide-table-properties",{"title":97,"path":98,"stem":99,"description":100,"icon":101},"Documents and tasks","\u002Fdocs\u002Findexing\u002Fdocuments","docs\u002F4.indexing\u002F3.documents","Upload and delete documents in batches, follow each write as a task, retry safely with Idempotency-Key, and browse what the index holds.","i-lucide-file-json",{"title":103,"path":104,"stem":105,"description":106,"icon":107},"Full catalog sync","\u002Fdocs\u002Findexing\u002Ffull-sync","docs\u002F4.indexing\u002F4.full-sync","Replace the whole catalog with a replace session, so products missing from your export disappear from search, without downtime.","i-lucide-refresh-cw",{"title":109,"path":110,"stem":111,"description":112,"icon":113},"Reindex and versions","\u002Fdocs\u002Findexing\u002Fversions","docs\u002F4.indexing\u002F5.versions","Rebuild an index with its saved mapping and swap it in without downtime, follow or cancel the rebuild, and read activeVersion and buildingVersion.","i-lucide-git-compare-arrows",{"title":115,"path":116,"stem":117,"description":118,"icon":119},"Data source","\u002Fdocs\u002Findexing\u002Fdata-source","docs\u002F4.indexing\u002F6.data-source","Let Zaproo download your product feed on a schedule, map it to documents, write only what changed and delete what left the feed.","i-lucide-rss",{"title":121,"description":122,"icon":123,"path":124,"stem":125,"children":126,"page":34},"Integrations","Connect your shop. Magento 2, product feeds and the API work today; more platforms are coming.","i-lucide-plug-zap","\u002Fdocs\u002Fintegrations","docs\u002F4.integrations",[127,133,139,144,150,156,161,166,171,176,181],{"title":128,"path":129,"stem":130,"description":131,"icon":132},"Integrations overview","\u002Fdocs\u002Fintegrations\u002Foverview","docs\u002F4.integrations\u002F01.overview","The ways to get your catalog into Zaproo Search, which one to pick, and how an integration shows up in the cabinet.","i-lucide-layout-grid",{"title":134,"path":135,"stem":136,"description":137,"icon":138},"Magento 2","\u002Fdocs\u002Fintegrations\u002Fmagento","docs\u002F4.integrations\u002F02.magento","Install the Zaproo Search module for Magento 2, connect each store view to its own index, and keep the catalog in sync.","i-lucide-shopping-cart",{"title":140,"path":141,"stem":142,"description":143,"icon":119},"Product feed","\u002Fdocs\u002Fintegrations\u002Fproduct-feed","docs\u002F4.integrations\u002F03.product-feed","Connect any shop that can publish its catalog as a feed. Zaproo downloads it on a schedule and writes only what changed.",{"title":145,"path":146,"stem":147,"description":148,"icon":149},"REST API and MCP","\u002Fdocs\u002Fintegrations\u002Frest-api-and-mcp","docs\u002F4.integrations\u002F04.rest-api-and-mcp","Send documents from your own code with the REST API, or let an AI agent manage the index over MCP.","i-lucide-code",{"title":151,"path":152,"stem":153,"description":154,"icon":155},"Shopify","\u002Fdocs\u002Fintegrations\u002Fshopify","docs\u002F4.integrations\u002F05.shopify","A Zaproo Search integration for Shopify is coming soon. Until then, connect the shop through a product feed or the REST API.","i-lucide-shopping-bag",{"title":157,"path":158,"stem":159,"description":160,"icon":155},"WooCommerce","\u002Fdocs\u002Fintegrations\u002Fwoocommerce","docs\u002F4.integrations\u002F06.woocommerce","A Zaproo Search integration for WooCommerce is coming soon. Until then, connect the shop through a product feed or the REST API.",{"title":162,"path":163,"stem":164,"description":165,"icon":155},"Shopware","\u002Fdocs\u002Fintegrations\u002Fshopware","docs\u002F4.integrations\u002F07.shopware","A Zaproo Search integration for Shopware is coming soon. Until then, connect the shop through a product feed or the REST API.",{"title":167,"path":168,"stem":169,"description":170,"icon":155},"BigCommerce","\u002Fdocs\u002Fintegrations\u002Fbigcommerce","docs\u002F4.integrations\u002F08.bigcommerce","A Zaproo Search integration for BigCommerce is coming soon. Until then, connect the shop through a product feed or the REST API.",{"title":172,"path":173,"stem":174,"description":175,"icon":155},"PrestaShop","\u002Fdocs\u002Fintegrations\u002Fprestashop","docs\u002F4.integrations\u002F09.prestashop","A Zaproo Search integration for PrestaShop is coming soon. Until then, connect the shop through a product feed or the REST API.",{"title":177,"path":178,"stem":179,"description":180,"icon":155},"commercetools","\u002Fdocs\u002Fintegrations\u002Fcommercetools","docs\u002F4.integrations\u002F10.commercetools","A Zaproo Search integration for commercetools is coming soon. Until then, connect the shop through a product feed or the REST API.",{"title":182,"path":183,"stem":184,"description":185,"icon":155},"Salesforce Commerce Cloud","\u002Fdocs\u002Fintegrations\u002Fsalesforce-commerce-cloud","docs\u002F4.integrations\u002F11.salesforce-commerce-cloud","A Zaproo Search integration for Salesforce Commerce Cloud is coming soon. Until then, connect the shop through a product feed or the REST API.",{"title":187,"description":188,"icon":189,"path":190,"stem":191,"children":192,"page":34},"Search and relevance","The search API, search profiles, facets, synonyms and ranking rules.","i-lucide-search","\u002Fdocs\u002Fsearch","docs\u002F5.search",[193,199,205,211,217],{"title":194,"path":195,"stem":196,"description":197,"icon":198},"Search API","\u002Fdocs\u002Fsearch\u002Fsearch-api","docs\u002F5.search\u002F1.search-api","The search request and response, every filter form, sorting, paging, highlighting and the inline profile for previews.","i-lucide-search-code",{"title":200,"path":201,"stem":202,"description":203,"icon":204},"Search profiles","\u002Fdocs\u002Fsearch\u002Fprofiles","docs\u002F5.search\u002F2.profiles","Every setting of a search profile, what it does to results, and the mistakes to avoid.","i-lucide-sliders-horizontal",{"title":206,"path":207,"stem":208,"description":209,"icon":210},"Facets","\u002Fdocs\u002Fsearch\u002Ffacets","docs\u002F5.search\u002F3.facets","The filter panels next to the results, the four facet types, index facets and profile facets, and how a shopper's clicks change the counts.","i-lucide-list-filter",{"title":212,"path":213,"stem":214,"description":215,"icon":216},"Synonyms","\u002Fdocs\u002Fsearch\u002Fsynonyms","docs\u002F5.search\u002F4.synonyms","Let different words find the same products, with equivalent and one-way rules, bulk import and export in the Solr format, and no reindex.","i-lucide-arrow-left-right",{"title":218,"path":219,"stem":220,"description":221,"icon":222},"Ranking rules","\u002Fdocs\u002Fsearch\u002Frules","docs\u002F5.search\u002F5.rules","Change the results for chosen searches. Put products first, hide them, lift or lower a brand, narrow the results or weigh fields differently, on a schedule and per profile.","i-lucide-list-ordered",{"title":224,"description":225,"icon":226,"path":227,"stem":228,"children":229,"page":34},"Autocomplete","Query suggestions as the shopper types.","i-lucide-text-cursor-input","\u002Fdocs\u002Fautocomplete","docs\u002F6.autocomplete",[230],{"title":224,"path":231,"stem":232,"description":233,"icon":226},"\u002Fdocs\u002Fautocomplete\u002Fsuggestions","docs\u002F6.autocomplete\u002F1.suggestions","Query suggestions as the shopper types, built every hour from your own searches, field values and custom entries.",{"title":235,"description":236,"icon":237,"path":238,"stem":239,"children":240,"page":34},"Analytics","Searches, zero-result queries and latency.","i-lucide-chart-line","\u002Fdocs\u002Fanalytics","docs\u002F7.analytics",[241,246,252],{"title":242,"path":243,"stem":244,"description":245,"icon":237},"Search analytics","\u002Fdocs\u002Fanalytics\u002Fsearch-analytics","docs\u002F7.analytics\u002F1.search-analytics","What the analytics page counts, which traffic it leaves out, how the headline numbers are defined, how comparisons and retention work, and how to get the weekly digest.",{"title":247,"path":248,"stem":249,"description":250,"icon":251},"Reports","\u002Fdocs\u002Fanalytics\u002Freports","docs\u002F7.analytics\u002F2.reports","Every analytics report with the definition of each column, the opportunities list and its fix buttons, the per-query view with before and after, and the CSV download.","i-lucide-table",{"title":253,"path":254,"stem":255,"description":256,"icon":257},"Event tracking","\u002Fdocs\u002Fanalytics\u002Fevent-tracking","docs\u002F7.analytics\u002F3.event-tracking","Send clicks, add-to-cart, purchases and suggestion clicks from your storefront, tie them to the search with searchId, and a copy-paste script that does it.","i-lucide-mouse-pointer-click",{"title":259,"description":260,"icon":261,"path":262,"stem":263,"children":264,"page":34},"AI agents (MCP)","Connect Claude Code or any MCP client and manage search from an agent.","i-lucide-bot","\u002Fdocs\u002Fmcp","docs\u002F8.mcp",[265,271,277],{"title":266,"path":267,"stem":268,"description":269,"icon":270},"MCP setup","\u002Fdocs\u002Fmcp\u002Fsetup","docs\u002F8.mcp\u002F1.setup","Connect Claude Code or any MCP client to Zaproo Search and manage indices, documents, profiles, synonyms and ranking rules from your agent.","i-lucide-plug",{"title":272,"path":273,"stem":274,"description":275,"icon":276},"MCP tools","\u002Fdocs\u002Fmcp\u002Ftools","docs\u002F8.mcp\u002F2.tools","Every tool the Zaproo Search MCP server offers, what an agent can do with each group, and prompts to start from.","i-lucide-wrench",{"title":278,"path":279,"stem":280,"description":281,"icon":282},"Resources and prompts","\u002Fdocs\u002Fmcp\u002Fresources","docs\u002F8.mcp\u002F3.resources","The index resources an MCP client can read, the tune_relevance prompt, and the errors the MCP server answers.","i-lucide-library",{"title":284,"description":285,"icon":286,"path":287,"stem":288,"children":289,"page":34},"Reference","Every REST route, every limit, plans and billing, and status.","i-lucide-book-open","\u002Fdocs\u002Freference","docs\u002F9.reference",[290,296,301,307],{"title":291,"path":292,"stem":293,"description":294,"icon":295},"REST API","\u002Fdocs\u002Freference\u002Frest-api","docs\u002F9.reference\u002F1.rest-api","The routes of the Zaproo Search REST API, grouped by area, with who may call it.","i-lucide-list-tree",{"title":297,"path":298,"stem":299,"description":300,"icon":77},"Limits","\u002Fdocs\u002Freference\u002Flimits","docs\u002F9.reference\u002F2.limits","Every size limit, cap and default of the Zaproo Search API in one place, with what happens when you reach it.",{"title":302,"path":303,"stem":304,"description":305,"icon":306},"Plans and billing","\u002Fdocs\u002Freference\u002Fbilling","docs\u002F9.reference\u002F3.billing","The plans, how usage is measured, what happens near a quota, and how plan changes and invoices work.","i-lucide-credit-card",{"title":308,"path":309,"stem":310,"description":311,"icon":312},"Status","\u002Fdocs\u002Freference\u002Fstatus","docs\u002F9.reference\u002F4.status","The status page and the status route, what each service covers and how to use them in your own monitoring.","i-lucide-activity",{"id":314,"title":68,"body":315,"description":71,"extension":1116,"meta":1117,"navigation":1118,"path":69,"seo":1119,"stem":70,"__hash__":1120},"docs\u002Fdocs\u002F3.keys\u002F1.api-keys.md",{"type":316,"value":317,"toc":1097},"minimark",[318,323,327,364,367,400,415,419,432,440,446,452,515,518,522,547,592,648,683,842,923,927,941,944,948,952,972,976,991,996,1003,1007,1022,1026,1075,1079,1093],[319,320,322],"h2",{"id":321},"what-a-key-is","What a key is",[324,325,326],"p",{},"An API key lets a program call the API without your password. Every key belongs to one project and acts only on that project's indices. Send it as a bearer token:",[328,329,334],"pre",{"className":330,"code":331,"language":332,"meta":333,"style":333},"language-bash shiki shiki-themes github-light-high-contrast github-light-high-contrast github-dark-high-contrast","curl https:\u002F\u002Fapi.zaproo-search.com\u002Fv1\u002Fprojects\u002F$PROJECT_ID\u002Findices -H \"Authorization: Bearer zs_sk_...\"\n","bash","",[335,336,337],"code",{"__ignoreMap":333},[338,339,342,346,350,354,357,361],"span",{"class":340,"line":341},"line",1,[338,343,345],{"class":344},"szw1H","curl",[338,347,349],{"class":348},"semJd"," https:\u002F\u002Fapi.zaproo-search.com\u002Fv1\u002Fprojects\u002F",[338,351,353],{"class":352},"s7iLA","$PROJECT_ID",[338,355,356],{"class":348},"\u002Findices",[338,358,360],{"class":359},"ssYy9"," -H",[338,362,363],{"class":348}," \"Authorization: Bearer zs_sk_...\"\n",[324,365,366],{},"There are two kinds of keys:",[368,369,370,383],"ul",{},[371,372,373,374,378,379,382],"li",{},"A ",[375,376,377],"strong",{},"secret key"," (",[335,380,381],{},"zs_sk_…",") is for your servers, scripts and AI agents. It can call every project route its access allows, the search and suggest routes, and the MCP server.",[371,384,373,385,378,388,391,392,395,396,399],{},[375,386,387],{},"public key",[335,389,390],{},"zs_pk_…",") is meant for browsers. It can only call ",[335,393,394],{},"POST \u002Fv1\u002Fsearch\u002F\u003CprofileKey>"," and ",[335,397,398],{},"POST \u002Fv1\u002Fsuggest\u002F\u003CsuggestKey>"," for the project's indices, and only from the web origins you list.",[324,401,402,403,406,407,410,411,414],{},"The browser sends the page's ",[335,404,405],{},"Origin"," header with every call. A public key used from a server has none and gets ",[335,408,409],{},"403 ORIGIN_NOT_ALLOWED",", so servers use a secret key with read access, limited to the index. See ",[412,413,29],"a",{"href":30},".",[319,416,418],{"id":417},"create-a-key","Create a key",[324,420,421,422,424,425,428,429,414],{},"In the cabinet, open the project's ",[375,423,68],{}," page. Click ",[375,426,427],{},"New key",". In the dialog, enter a name, pick the type and the access, list the allowed origins for a public key, and click ",[375,430,431],{},"Create key",[324,433,434],{},[435,436],"img",{"alt":437,"src":438,"title":439},"The API keys page with a secret full-access key and a public read key, behind the New API key form with a name, a type and an access select","\u002Fdocs\u002Fscreenshots\u002Fapi-keys.png","The API keys page",[324,441,442,443,445],{},"Creating keys needs the admin or owner role and a verified email. Until then ",[375,444,427],{}," stays off and the page says why. Only a signed-in person can create keys. A key cannot create other keys.",[447,448],"api-route",{"auth":449,"method":450,"path":451},"Admin or owner with a verified email, not while support is acting as you","POST","\u002Fv1\u002Fprojects\u002F:projectId\u002Fapi-keys",[328,453,455],{"className":330,"code":454,"language":332,"meta":333,"style":333},"curl -X POST https:\u002F\u002Fapi.zaproo-search.com\u002Fv1\u002Fprojects\u002F$PROJECT_ID\u002Fapi-keys \\\n  -H \"Authorization: Bearer $ACCESS_TOKEN\" -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\"name\": \"Storefront server\", \"kind\": \"SECRET\", \"access\": \"READ\", \"indexScope\": [\"'$INDEX_ID'\"]}'\n",[335,456,457,478,500],{"__ignoreMap":333},[338,458,459,461,464,467,469,471,474],{"class":340,"line":341},[338,460,345],{"class":344},[338,462,463],{"class":359}," -X",[338,465,466],{"class":348}," POST",[338,468,349],{"class":348},[338,470,353],{"class":352},[338,472,473],{"class":348},"\u002Fapi-keys",[338,475,477],{"class":476},"sklAV"," \\\n",[338,479,481,484,487,490,493,495,498],{"class":340,"line":480},2,[338,482,483],{"class":359},"  -H",[338,485,486],{"class":348}," \"Authorization: Bearer ",[338,488,489],{"class":352},"$ACCESS_TOKEN",[338,491,492],{"class":348},"\"",[338,494,360],{"class":359},[338,496,497],{"class":348}," \"Content-Type: application\u002Fjson\"",[338,499,477],{"class":476},[338,501,503,506,509,512],{"class":340,"line":502},3,[338,504,505],{"class":359},"  -d",[338,507,508],{"class":348}," '{\"name\": \"Storefront server\", \"kind\": \"SECRET\", \"access\": \"READ\", \"indexScope\": [\"'",[338,510,511],{"class":352},"$INDEX_ID",[338,513,514],{"class":348},"'\"]}'\n",[324,516,517],{},"The cabinet form sets the name, type, access and allowed origins. Index scope and expiry are set through the API only.",[319,519,521],{"id":520},"key-settings","Key settings",[523,524,528,533,536],"setting",{"name":525,"type":526,"values":527},"name","string","1 to 100 characters",[529,530,532],"h3",{"id":531},"key-name","Key name",[324,534,535],{},"What the key is for. The name shows in the key list, next to the key's prefix.",[537,538,539],"template",{"v-slot:tips":333},[368,540,541,544],{},[371,542,543],{},"Name a key after the program that uses it (\"Storefront server\", \"Nightly catalog import\"). When you need to revoke one, you know which program stops working.",[371,545,546],{},"Create one key per program. Sharing a key means revoking it breaks every program at once.",[523,548,551,555,572,582],{"name":549,"type":550},"kind","SECRET | PUBLIC",[529,552,554],{"id":553},"key-type","Key type",[324,556,557,560,561,564,565,560,568,571],{},[335,558,559],{},"SECRET"," creates a ",[335,562,563],{},"zs_sk_"," key for servers. ",[335,566,567],{},"PUBLIC",[335,569,570],{},"zs_pk_"," key for browsers that can only search and suggest. The type cannot change later. Create a new key instead.",[537,573,574],{"v-slot:tips":333},[368,575,576,579],{},[371,577,578],{},"Never put a secret key in frontend code, a mobile app or a public repository. Anyone who reads it can act on your project with its access.",[371,580,581],{},"A public key sent to any route other than search and suggest is refused.",[537,583,584],{"v-slot:related":333},[368,585,586],{},[371,587,588],{},[412,589,591],{"href":590},"#allowed-origins","Allowed origins",[523,593,597,600,612,639],{"name":594,"type":595,"default":596},"access","FULL | READ","FULL",[529,598,599],{"id":594},"Access",[324,601,602,604,605,608,609,611],{},[335,603,596],{}," can read and change everything in the project: indices, mappings, documents, profiles, synonyms, rules and autocomplete. ",[335,606,607],{},"READ"," can read all of that and search, but changes nothing. A public key always has ",[335,610,607],{},", whatever you send.",[537,613,614],{"v-slot:tips":333},[368,615,616,622,631],{},[371,617,618,619,621],{},"Give a server that only searches a ",[335,620,607],{}," key. If the key leaks, nobody can delete your indices with it.",[371,623,624,625,627,628,630],{},"Give your catalog import and your AI agent a ",[335,626,596],{}," key. An agent with a ",[335,629,607],{}," key can call only the read tools.",[371,632,373,633,635,636,414],{},[335,634,607],{}," key on a write route answers ",[335,637,638],{},"403 FORBIDDEN",[537,640,641],{"v-slot:related":333},[368,642,643],{},[371,644,645],{},[412,646,49],{"href":647},"\u002Fdocs\u002Faccount\u002Forganizations#what-each-role-may-do",[523,649,654,658,669],{"name":650,"type":651,"default":652,"values":653},"indexScope","index id list","[] (every index)","up to 100 index ids",[529,655,657],{"id":656},"index-scope","Index scope",[324,659,660,661,664,665,668],{},"Limits the key to the listed indices of the project. An empty list means every index, including indices created later. To the key, an index outside its scope does not exist. Its routes answer ",[335,662,663],{},"404 INDEX_NOT_FOUND",", it is missing from the index list, and its tasks are missing from the task list. Search and suggest with a profile or suggest key of such an index answer ",[335,666,667],{},"404"," too.",[537,670,671],{"v-slot:tips":333},[368,672,673,676],{},[371,674,675],{},"Scope the key of a storefront server to the one index it searches.",[371,677,678,679,682],{},"A scoped key cannot create indices. It answers ",[335,680,681],{},"403 INDEX_SCOPED_KEY",", because the key could not see the new index.",[523,684,688,691,703,737,813,816],{"name":685,"type":686,"values":687},"allowedOrigins","origin list","up to 50; required for a public key",[529,689,591],{"id":690},"allowed-origins",[324,692,693,694,696,697,699,700,702],{},"The web origins a public key works from. On every request with a public key, the API compares the request's ",[335,695,405],{}," header with this list. A request whose origin is not on the list, or that has no ",[335,698,405],{}," header, answers ",[335,701,409],{},". A secret key ignores the list.",[324,704,705,706,709,710,713,714,717,718,709,721,724,725,728,729,732,733,736],{},"Write each origin as ",[335,707,708],{},"scheme:\u002F\u002Fhost"," or ",[335,711,712],{},"scheme:\u002F\u002Fhost:port",", in lower case, with no path and no trailing slash. In the cabinet's ",[375,715,716],{},"Create API key"," form you may type just the domain, ",[335,719,720],{},"shop.example.com",[335,722,723],{},"*.shop.example.com",", and it is saved as its ",[335,726,727],{},"https:\u002F\u002F"," origin in lower case. Type ",[335,730,731],{},"http:\u002F\u002F"," origins, such as ",[335,734,735],{},"http:\u002F\u002Flocalhost:3000",", in full:",[738,739,740,756],"table",{},[741,742,743],"thead",{},[744,745,746,750,753],"tr",{},[747,748,749],"th",{},"Entry",[747,751,752],{},"Matches",[747,754,755],{},"Does not match",[757,758,759,780,798],"tbody",{},[744,760,761,767,771],{},[762,763,764],"td",{},[335,765,766],{},"https:\u002F\u002Fshop.example.com",[762,768,769],{},[335,770,766],{},[762,772,773,776,777],{},[335,774,775],{},"https:\u002F\u002Fwww.shop.example.com",", ",[335,778,779],{},"http:\u002F\u002Fshop.example.com",[744,781,782,787,794],{},[762,783,784],{},[335,785,786],{},"https:\u002F\u002F*.shop.example.com",[762,788,789,776,791],{},[335,790,775],{},[335,792,793],{},"https:\u002F\u002Feu.m.shop.example.com",[762,795,796],{},[335,797,766],{},[744,799,800,804,808],{},[762,801,802],{},[335,803,735],{},[762,805,806],{},[335,807,735],{},[762,809,810],{},[335,811,812],{},"http:\u002F\u002Flocalhost:3001",[324,814,815],{},"In the cabinet, enter one origin per line.",[537,817,818],{"v-slot:tips":333},[368,819,820,830,836],{},[371,821,822,823,825,826,395,828,414],{},"A wildcard covers subdomains only. To allow ",[335,824,766],{}," and its subdomains, list both ",[335,827,766],{},[335,829,786],{},[371,831,832,833,835],{},"The scheme and the port must match. List ",[335,834,735],{}," separately for local development, and keep it off production keys.",[371,837,838,839,841],{},"Allowed origins are not a secret. Anyone can send any ",[335,840,405],{}," header from a script, so they stop other websites, not scripts.",[523,843,847,851,858,913],{"name":844,"type":845,"default":846},"expiresAt","ISO 8601 date-time","none (never expires)",[529,848,850],{"id":849},"expiry","Expiry",[324,852,853,854,857],{},"The moment the key stops working. After it, every request with the key answers ",[335,855,856],{},"401 API_KEY_EXPIRED",". Leave it out for a key that never expires.",[328,859,863],{"className":860,"code":861,"language":862,"meta":333,"style":333},"language-json shiki shiki-themes github-light-high-contrast github-light-high-contrast github-dark-high-contrast","{ \"name\": \"Agency access\", \"kind\": \"SECRET\", \"access\": \"READ\", \"expiresAt\": \"2026-12-31T23:59:59Z\" }\n","json",[335,864,865],{"__ignoreMap":333},[338,866,867,870,874,877,880,882,885,887,890,892,895,897,900,902,905,907,910],{"class":340,"line":341},[338,868,869],{"class":352},"{ ",[338,871,873],{"class":872},"sb7M8","\"name\"",[338,875,876],{"class":352},": ",[338,878,879],{"class":348},"\"Agency access\"",[338,881,776],{"class":352},[338,883,884],{"class":872},"\"kind\"",[338,886,876],{"class":352},[338,888,889],{"class":348},"\"SECRET\"",[338,891,776],{"class":352},[338,893,894],{"class":872},"\"access\"",[338,896,876],{"class":352},[338,898,899],{"class":348},"\"READ\"",[338,901,776],{"class":352},[338,903,904],{"class":872},"\"expiresAt\"",[338,906,876],{"class":352},[338,908,909],{"class":348},"\"2026-12-31T23:59:59Z\"",[338,911,912],{"class":352}," }\n",[537,914,915],{"v-slot:tips":333},[368,916,917,920],{},[371,918,919],{},"Give a temporary key to an agency or a contractor with an expiry date, so access ends on its own.",[371,921,922],{},"An expired key stays in the list, and you cannot extend it. Create a new key.",[319,924,926],{"id":925},"the-key-is-shown-once","The key is shown once",[324,928,929,930,933,934,937,938,414],{},"The answer to a create request is the only time the full key appears. The cabinet shows it in a box with ",[375,931,932],{},"Copy key",". Copy it into your secret store before you click ",[375,935,936],{},"I have saved it",". Zaproo stores only a hash of the key and its first 14 characters, the prefix you see in the list, for example ",[335,939,940],{},"zs_sk_Ab3dE9xQ…",[324,942,943],{},"If you lose a key, revoke it and create a new one.",[319,945,947],{"id":946},"list-keys","List keys",[447,949],{"auth":950,"method":951,"path":451},"Any member of the organization","GET",[324,953,954,955,776,957,776,959,776,962,395,965,968,969,971],{},"The list shows each key's name, prefix, type, access, allowed origins and status. Through the API, each key also has its ",[335,956,650],{},[335,958,844],{},[335,960,961],{},"revokedAt",[335,963,964],{},"createdAt",[335,966,967],{},"lastUsedAt",". ",[335,970,967],{}," is updated about once a minute, not on every request.",[319,973,975],{"id":974},"revoke-a-key","Revoke a key",[324,977,978,979,982,983,986,987,990],{},"Click ",[375,980,981],{},"Revoke"," in the key's row. The key stops working at once. The very next request with it answers ",[335,984,985],{},"401 API_KEY_REVOKED",". A revoked key stays in the list with the status ",[375,988,989],{},"Revoked",", and it cannot be turned back on.",[447,992],{"auth":993,"method":994,"path":995},"Admin or owner of the organization","DELETE","\u002Fv1\u002Fprojects\u002F:projectId\u002Fapi-keys\u002F:keyId",[324,997,998,999,1002],{},"Revoking a key that is already revoked answers ",[335,1000,1001],{},"204"," again and changes nothing.",[529,1004,1006],{"id":1005},"replace-a-key-without-downtime","Replace a key without downtime",[1008,1009,1010,1013,1016],"ol",{},[371,1011,1012],{},"Create a new key with the same settings.",[371,1014,1015],{},"Put the new key into your program and deploy it.",[371,1017,1018,1019,1021],{},"Check that the old key's ",[335,1020,967],{}," stopped moving, then revoke the old key.",[319,1023,1025],{"id":1024},"common-mistakes","Common mistakes",[368,1027,1028,1034,1050,1069],{},[371,1029,1030,1033],{},[375,1031,1032],{},"Calling project routes with a public key."," A public key only searches and suggests. Use a secret key for everything else.",[371,1035,1036,1042,1043,1045,1046,1049],{},[375,1037,1038,1039,1041],{},"Testing a public key with curl and no ",[335,1040,405],{}," header."," The API answers ",[335,1044,409],{},". Add ",[335,1047,1048],{},"-H \"Origin: https:\u002F\u002Fshop.example.com\""," with one of the key's origins.",[371,1051,1052,1055,1056,395,1059,1062,1063,1066,1067,414],{},[375,1053,1054],{},"Writing origins with a path or a trailing slash."," ",[335,1057,1058],{},"https:\u002F\u002Fshop.example.com\u002F",[335,1060,1061],{},"https:\u002F\u002Fshop.example.com\u002Fsearch"," are refused with ",[335,1064,1065],{},"400 VALIDATION_FAILED",". Write ",[335,1068,766],{},[371,1070,1071,1074],{},[375,1072,1073],{},"Keeping a key after the person who set it up left."," Keys belong to the project, not to a person. Revoke the keys that person knew.",[319,1076,1078],{"id":1077},"related","Related",[368,1080,1081,1085,1089],{},[371,1082,1083],{},[412,1084,73],{"href":74},[371,1086,1087],{},[412,1088,29],{"href":30},[371,1090,1091],{},[412,1092,266],{"href":267},[1094,1095,1096],"style",{},"html pre.shiki code .szw1H, html code.shiki .szw1H{--shiki-light:#702C00;--shiki-default:#702C00;--shiki-dark:#FFB757}html pre.shiki code .semJd, html code.shiki .semJd{--shiki-light:#032563;--shiki-default:#032563;--shiki-dark:#ADDCFF}html pre.shiki code .s7iLA, html code.shiki .s7iLA{--shiki-light:#0E1116;--shiki-default:#0E1116;--shiki-dark:#F0F3F6}html pre.shiki code .ssYy9, html code.shiki .ssYy9{--shiki-light:#023B95;--shiki-default:#023B95;--shiki-dark:#91CBFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sklAV, html code.shiki .sklAV{--shiki-light:#A0111F;--shiki-default:#A0111F;--shiki-dark:#FF9492}html pre.shiki code .sb7M8, html code.shiki .sb7M8{--shiki-light:#024C1A;--shiki-default:#024C1A;--shiki-dark:#72F088}",{"title":333,"searchDepth":480,"depth":480,"links":1098},[1099,1100,1101,1109,1110,1111,1114,1115],{"id":321,"depth":480,"text":322},{"id":417,"depth":480,"text":418},{"id":520,"depth":480,"text":521,"children":1102},[1103,1104,1105,1106,1107,1108],{"id":531,"depth":502,"text":532},{"id":553,"depth":502,"text":554},{"id":594,"depth":502,"text":599},{"id":656,"depth":502,"text":657},{"id":690,"depth":502,"text":591},{"id":849,"depth":502,"text":850},{"id":925,"depth":480,"text":926},{"id":946,"depth":480,"text":947},{"id":974,"depth":480,"text":975,"children":1112},[1113],{"id":1005,"depth":502,"text":1006},{"id":1024,"depth":480,"text":1025},{"id":1077,"depth":480,"text":1078},"md",{},{"icon":63},{"title":68,"description":71},"ktSpbOvb_rtUa3kifCex7MCM39i4bEWLqYPVWfYMyY0",[1122,1123],{"title":55,"path":56,"stem":57,"description":58,"icon":59,"children":-1},{"title":73,"path":74,"stem":75,"description":76,"icon":77,"children":-1},1792679791159]