Get the caller's account
/v1/me in the Me API.
curl https://api.example.test/v1/me \ -H "Authorization: Bearer $TOKEN"The caller's account; never paginated.
Read it once per session. Nothing here changes under a running client except by an action the client itself takes (changing alert destinations, linking Telegram, joining a team). Read it on sign-in and after those actions; there is no need to poll it.
current_teamis the team the token is scoped to (scope:team:<uuid>), when you still belong to it;nullwhen the token carries no team scope. Itsidis the value every team call resolves against.teamsis every team you own or are a member of, the same list asGET /v1/teams.alert_destinationsis the same list asGET /v1/me/alert-destinations;alert_destinations_defaultistruewhile no destination has been written and the default routing applies (every class to your linked Telegram chat when there is one, and email for what nothing else carries).unread_notificationsis how many entries of your Notifications Center you have not opened, the number on the sidebar entry.timezoneis the IANA name every timestamp the app shows you is in; the API itself always answers in UTC with an offset.
Requires ability
The token must hold this ability, or the call is refused with 403.
MCP tool
Runs the same action from an agent, behind the same ability.
Authorization
bearerToken A personal access token minted in the app under Account Settings, then API Tokens, sent as Authorization: Bearer zg_live_…. The token carries the abilities each endpoint lists under Requires ability and is frozen to one team, and optionally to one project, at mint time.
In: header
Responses
200OKapplication/json
The caller's account.
401UnauthorizedAUTHENTICATION_REQUIREDapplication/json
The request carries no bearer token, or one that is revoked, malformed, or minted for another environment (a zg_test_ token on production).
403ForbiddenTOKEN_MISSING_ABILITYapplication/json
The token is valid but does not carry the ability this endpoint requires; error.context.required_ability names the one to grant. An endpoint that also checks who registered a row answers FORBIDDEN with the same status, and says so in its own description.
429Too many requestsRATE_LIMITEDapplication/json
The token has spent its 300 requests a minute or 10,000 an hour; Retry-After says when the next one is accepted.
How is this guide?
Last updated on
Me API
GET /v1/me is the first call a client makes.
Notifications API
Every alert Zuse Bifrost sends a person (an approval waiting on them, an assignment, a mention, a failing test run, a release approved, an incident opened, a security notice, the Monday digest) also lands in the Notifications Center: the sidebar entry with its unread count and popover, and the page at /notifications.