Authentication can fail when a key is malformed, revoked, expired, belongs to
an account without current API access, does not include the required scope, or
does not permit the request IP.
Status
Error
Meaning
401
invalid_api_key
The Bearer key is absent, malformed, inactive, or invalid.
403
insufficient_scope
The key lacks the endpoint’s required scope.
403
ip_not_allowed
The request source is outside the key’s allowlist.
Error responses use this shape:
{ "error": "invalid_api_key", "message": "API key is invalid or inactive"}
⌘I
Assistant
Responses are generated using AI and may contain mistakes.