ZoneMinder now features a new API using which 3rd party applications can interact with ZoneMinder data. It is STRONGLY recommended that you enable authentication along with APIs. Note that the APIs return sensitive data like Monitor access details which are configured as JSON objects. Which is why we recommend you enabling authentication, especially if you are exposing your ZM instance on the Internet.