unauthorized

​

When this happens

• No Authorization header at all.
• The header is present but the bearer token is empty / malformed.
• The API key has been deleted (rotated out).
• The Auth0 JWT has expired.
• The Agnes-Version is so old the server cannot accept its credentials.

​

Example response

{
  "detail": "Invalid authentication credentials",
  "code": "unauthorized",
  "request_id": "5b3f6c7e-7d24-4d40-9b12-3a59c01c6e91",
  "doc_url": "https://docs.lasscyber.com/errors/unauthorized"
}

​

How to fix

1. Confirm the Authorization: Bearer … header is set.
2. Confirm the token’s prefix:
   • ak_ for live keys.
   • ak_test_ for sandbox keys.
   • JWT for Auth0-authenticated dashboard requests.
3. If using API keys, mint a fresh one in agnes.lasscyber.com/keys and delete the old one once the new one is rolled out.
4. If using JWTs, sign in again from the dashboard.

​

SDK behaviour

​

Related

• Authentication — bearer headers, key rotation, version pinning.
• forbidden — authentication succeeded but authorization failed.