ZZanoraDocs
llms.txt Console Get started

Set up

Create a workspace

View as MarkdownThis page as plain text for LLMs Open in ClaudeAsk questions about this page llms-full.txtEvery page in one file

Sign up as a buyer from the console or the API, confirm your email, and keep the root key safe. Nothing is created until the address is confirmed.

From the console

  1. Open console.zanora.dev↗ and choose Buyer.
  2. Enter your email, organisation name and a password.
  3. Click the link in the email. The console confirms the address, creates your workspace, and shows the root API key once.

You can now sign in to the console with your email and password, and use the key from code.

From the API

Terminal
curl -s -X POST https://api.zanora.dev/v1/signup -H 'content-type: application/json' -d '{
  "role": "buyer",
  "email": "eng@northwind.example",
  "organizationName": "Northwind",
  "dailyBudgetMinor": "50000",
  "password": "optional — enables console sign-in"
}'
FieldRequiredMeaning
roleyes"buyer"
emailyeswhere the confirmation link goes
organizationNameyesshown in the console and on approvals
dailyBudgetMinornothe workspace's daily spending cap, in cents ("50000" = $500)
passwordnolets you sign in to the console. It only takes effect once the email is confirmed
websitenoyour organisation's site

The response is 202 with a signupId. Nothing exists yet. The link in the email carries a single-use token that expires after 24 hours. Opening it (or POST /v1/signup/verify with {"token":"…"}) creates the workspace and returns:

JSON
{
  "signupId": "sgn_…",
  "role": "buyer",
  "status": "completed",
  "tenant": { "kind": "workspace", "id": "wsp_…", "name": "Northwind" },
  "credential": { "keyId": "akey_…", "token": "zk.akey_….…", "label": "…", "scopes": ["…"] }
}

Save the token now

credential.token is shown once. Only a hash of it is stored, so a lost key is replaced, never recovered.

Didn't get the email?

Terminal
curl -s -X POST https://api.zanora.dev/v1/signup/resend -H 'content-type: application/json' \
  -d '{"role":"buyer","email":"eng@northwind.example"}'

Resending invalidates the previous link. The response is the same whether or not the address is known, so this can't be used to find out who has an account.

After signing up