Invalid API Key

401 Unauthorized · Invalid API key · Missing X-API-Key header · AuthenticationError.

Run through these:

• Header is named exactly X-API-Key.
• Key re-copied from API Keys — no stray spaces or line breaks.
• App reads the right variable (CUSTODIAN_SDK_API_KEY for SDKs, CUSTODIAN_API_KEY for raw curl).
• Process restarted after changing the env var / secret.
• Key isn't expired — if it is, renew the plan and use the current key.

See also

Platform API auth · API key expiration