Skip to main content
Quick Summary: The request did not carry a usable API key. The response is deliberately generic — it never says whether a key exists, expired, or was revoked.

​
What happened

Authentication failed. Every /api/v1 request must carry Authorization: Bearer sdb_live_... with a live key.

​
Likely causes

  • The Authorization header is missing, or not in Bearer <key> form.
  • The key was revoked, or its rotation grace window has ended.
  • The key has passed its expiry date.
  • A different kind of token (a session token, a JWT) was sent — the public API accepts only API keys.
  • The acting person bound to the key was deactivated or moved companies.

​
What to do

Verify the header format first. If it is correct, ask a company administrator to check the key under Settings → API Credentials — and to rotate or issue a new key if needed. Keys are shown once at creation; a lost key cannot be recovered, only replaced.