Unauthorized

What it means

The request needs a credential and was not authenticated.

Common causes

• No Authorization header was sent.
• The header is not in the form Authorization: Bearer <credential>.

What to do

Send an API key or an OAuth access token as Authorization: Bearer <credential>. See Authentication.

Retry: only after a fix. The same request fails the same way until you change the request, the credential or the resource.

This response also carries WWW-Authenticate, which says how to authenticate and where the sign-in metadata lives.

Over MCP, the same failure is a tool result with isError: true, the code unauthorized and retryable: false.

Example

A response body for this problem. The detail and instance vary with the request.

{
  "type": "https://api.tobie.team/problems/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Authentication is required",
  "code": "unauthorized",
  "instance": "/v1/tasks",
  "requestId": "01JC0S7Z5F3X9QK2M4N6P8R0TV"
}