unauthorized

The credential is missing or invalid.

HTTP	code	Retryable?
401	unauthorized	no

When it happens

You did not send Authorization: Bearer, the key is unknown, or a signed operation arrived without X-API-Key + JWT.

reason values

On a signed operation, X-API-Key takes the key prefix, not the full secret. Sending the full secret resolves no key and returns this error with detail: "Unknown API key." — not invalid_signature.

reason	Meaning
signed_jwt_on_bearer_route	You signed a Tier-1 endpoint. Your key is fine — the signature is what does not belong. Resend with Authorization: Bearer <secret> and no X-API-Key.

How to resolve it

Make sure you are sending the correct key for the environment (skp_live_ vs skp_test_). For money-moving operations, use the signed flow (level 2).

Example

{
  "type": "https://docs.skipo.com/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthorized",
  "retryable": false,
  "detail": "The credential is missing or invalid."
}

---

Back to the error catalog · See the error format.