diff --git a/sdk/access.go b/sdk/access.go
index c759c13b..46c5af4e 100644
--- a/sdk/access.go
+++ b/sdk/access.go
@@ -9,6 +9,10 @@ import (
 )
 
 func CreateAccess(root env_core.Root, request *AccessRequest) (*Access, error) {
+	if !root.IsEnabled() {
+		return nil, errors.New("environment is not enabled; enable with 'zrok enable' first!")
+	}
+
 	out := share.NewAccessParams()
 	out.Body = &rest_model_zrok.AccessRequest{
 		ShrToken: request.ShareToken,
diff --git a/sdk/share.go b/sdk/share.go
index c2d0cbbb..2f843e14 100644
--- a/sdk/share.go
+++ b/sdk/share.go
@@ -10,6 +10,10 @@ import (
 )
 
 func CreateShare(root env_core.Root, request *ShareRequest) (*Share, error) {
+	if !root.IsEnabled() {
+		return nil, errors.New("environment is not enabled; enable with 'zrok enable' first!")
+	}
+
 	var err error
 	var out *share.ShareParams