unauthorized

unauthorized

HTTP 401 Unauthorized
Content-Type: application/problem+json

{
  "type": "https://docs.transmute.403fin.io/errors/unauthorized",
  "title": "...",
  "status": 401,
  "detail": "...",
  "requestId": "req_01J..."
}

Authentication failed. The response is deliberately uniform: a missing header, malformed key, unknown key, revoked key, or expired key all look identical.

Common causes

• No Authorization: Bearer ... header, or a typo in the scheme
• The key was revoked (perhaps by a rotation)
• An expired OAuth access token (they live 15 minutes — mint a new one)
• Whitespace or quoting mangled the key in your environment/config

How to fix it

Verify the key value against your secret manager, confirm in the portal that the key is still active, and for OAuth mint a fresh token. The API will never tell you which check failed — that is intentional.

Does it bill?

No — rejected before the engine runs. See Test vs Live Keys for the full billing rules.

Related

• Errors Overview — the problem+json shape and the closed catalog
• Every response carries an X-Request-Id; quote it when contacting support.