---
title: "Not authenticated"
description: "This request needs a valid API key."
lang: en
url: https://developers.bodo-app.com/en/problems/UNAUTHENTICATED/
apiVersion: 2026-11-01
---

# Not authenticated

This request needs a valid API key.

**Status 401** · `UNAUTHENTICATED`

## Typical cause

The key is missing, wrong, expired, revoked or paused, comes from an IP outside its rule, or the organization’s API is off. The answer deliberately does not say which.

## Way out

As the owner you see the exact reason in the request log in Bodo. Send the key only in the header `Authorization: Bearer …`, never in a query or a cookie.

## Example response

**Example response**

```http
GET /v1/me

HTTP/1.1 401 Unauthorized
Content-Type: application/problem+json
Content-Language: en

{
  "type": "https://developers.bodo-app.com/problems/UNAUTHENTICATED",
  "title": "Not authenticated",
  "status": 401,
  "instance": "/v1/me",
  "code": "UNAUTHENTICATED",
  "requestId": "req_01JBD8Y3K5M7Q2W9X4Z6T1V0NP"
}
```

## Related

- [403 FORBIDDEN](/en/problems/FORBIDDEN/) · Forbidden
- [403 API_MODULE_DISABLED](/en/problems/API_MODULE_DISABLED/) · Public API not enabled

Read on: [Keys & principals](/en/guides/keys/)