Clinic resources · Connect · Zenoti
Zenoti · Setup guideConnect Zenoti to Zelix Labs
Create a backend app in Zenoti, limited to the API groups the booking system needs, and generate an API key for it.
Prefer us to set it up with you?See the two ways to set it upWhat an API key is
How Zenoti limits access
Zenoti issues keys per app. When you create the app you choose its scope by selecting data permissions under each API group, so the key can only reach the groups you tick.
Zenoti generates a separate key for each app, so our key is independent of any other integration you run.
Steps
-
Open the Apps page
At the organisation level, open the Configuration icon, then search for and select Apps under Integrations.
On older Zenoti layouts the same page is at Admin > Setup > Apps.
-
Add a backend app
On the Manage Applications page, click Add and name the app
Zelix Labs booking. -
Set the scope
Under the API groups, select only the data permissions your project lead lists for you: typically appointments and availability, guests (your clients' contact details), and read access to centres, services and providers.
Leave everything else unselected, including invoices, payments, gift cards and memberships, inventory, employees and settings.
-
Choose API key authentication and generate the key
Choose API keys as the authentication method and save. Zenoti generates an Application ID and secret for the app. Use them to generate the API key, then copy the key.
-
Send us the key
Send the key to us through the one-time link your project lead gives you. Please don't send keys by email or chat message: the one-time link can be opened once and then stops working. Include the Application ID with it.
Leave these off
| Access | Why we don't need it |
|---|---|
| Invoices, payments, gift cards, memberships | Not part of the standard setup. If a project needs package balances, your project lead will agree an optional read-only add-on with you first. |
| Employees, payroll and settings | The booking system never reads staff records or changes your configuration. |
| Clinical forms and notes | Booking needs only availability, appointments and client name and phone. |
What we keep
Every patient record is cut down to name, phone and status the moment it reaches our system. Everything else, including date of birth, address, email, notes and medical alerts, is discarded before any other part of the system sees it.
On top of the limits you set here, our code carries its own fixed list of allowed actions, so a request for anything else is refused before it leaves our system. Read the full clinic security standard.
Sources
Checked against Zenoti's help documentation on 25 Oct 2026. Zenoti sometimes moves menus between releases. If your screens differ, contact your project lead and we'll go through it with you.