unauthorized

HTTP 401: Unauthorized. Retrying the same request gives the same error. Errors never cost API credits. Every 401 carries a WWW-Authenticate header. On the MCP endpoint it also points at the protected resource metadata, which is how AI assistants start the sign-in. OAuth access tokens work only on the MCP endpoint; REST takes API keys. What to do: Send a valid API key as Authorization: Bearer alura_sk_....

Response

{
  "type": "https://docs.alura.io/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthorized",
  "detail": "Unauthorized",
  "suggestion": "Send a valid API key as `Authorization: Bearer alura_sk_...`.",
  "retryable": false,
  "request_id": "req_01JQ5W3H8M2N4P6R8T0V2X4Z6B"
}

The response is application/problem+json (RFC 9457) and has a Request-Id header with the same request_id. See all errors.

Get started

Guides

Research features

Methodology

Resources

Legal