← Error catalogue

401 Unauthorized

No valid API key was supplied.

Machine code: unauthorized

The Authorization header was missing, or the key is unknown, expired, or revoked.

How to resolve

Send a valid key as Authorization: Bearer oi_live_<id>_<secret>. Keys are issued by your Provider Admin in the OpenIRIS admin application.

Response shape

Every error is an RFC 9457 application/problem+json document with a machine code and a trace_id you can quote to support.

{
  "type": "https://docs.openiris.io/errors/401",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthorized",
  "detail": "API key is missing or invalid.",
  "instance": "/v1/bookings",
  "trace_id": "0HMVABCDEF123"
}