# unauthorized

> No valid credential came with the request: the key is missing, mistyped or revoked, or a signed-in session has expired.

HTTP `401` · `retryable` is `false`

Every request needs `Authorization: Bearer` followed by an API key (`kabu_live_sk_…` or `kabu_test_sk_…`), or a
signed-in person's token from the Kabu apps. This one had none, or one Kabu does not accept.

**What to do:** send a valid key. With the CLI, run `kabu whoami` to see which key is in use and `kabu login --device`
to get a new one. A revoked key stays revoked.

## The response

Every error comes as `application/problem+json`; [Errors](/docs/errors) explains each field.

```json
{
  "type": "https://usekabu.com/docs/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthorized",
  "detail": "…",
  "hint": "…",
  "retryable": false,
  "request_id": "req_…",
  "doc_url": "https://usekabu.com/docs/errors/unauthorized"
}
```