ire an API key for safe operations</h3>

If enabled then the API key is not required for Views or Other operations that are considered 'safe', in other words operations that do not make any changes to ZAP. 
Such operations do however give access to ZAP data such as alert, messages, and file system paths.  
They can also be used by web applications to detect the presence of ZAP.

<h3>Report permission errors via API</h3>

If enabled then ZAP will report permission errors via the API, which can be used by web