In the env zero web app, go to Organization → Settings → API Keys, click Add API Key, name the key, and copy both the API Key ID and API Key Secret immediately; the secret is only shown once. This key pair is used for env zero REST API calls and the CLI. See API Keys and the CLI guide.