Zabbix 6.4+ rejects API tokens in the JSON-RPC "auth" field. Tokens must now be sent as "Authorization: Bearer <token>" HTTP header. User/password sessions still use the payload auth field as before. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>