Developers
One token, every app.
Each povzscaler.com app has a documented JSON API. A povzscaler.com API token works for all of them, scoped per app to read or write.
Authentication
Send the token on every request. Tokens never reach the apps: the edge exchanges each one for a short-lived identity signed by the account app.
Authorization: Bearer povz_…<app>:readallows GET;<app>:writealso allows changes.- 401 means no or an invalid token; 403 names the scope or role that's missing.
- Errors are JSON:
{"detail": "…"}.
APIs
-
Command Center
command:*Tasks, customers and PoVs. Ask
GET /todayfor what's on your plate./api/v1 -
DNS
dns:*List, add, change and delete GoDaddy DNS records, with an audit log.
/api/v1 -
Console
console:*Clients, their Zscaler tenants, baselines and PoVs. Some calls change live tenants.
/api -
Account
account:*Who you are, your API tokens, and people and roles (admin).
/api/v1