Invalid or revoked API key

The API key presented was rejected.

401 application/problem+json

{
  "type": "https://docs.permitcore.io/errors/invalid-api-key",
  "title": "Invalid or revoked API key",
  "status": 401,
  "detail": "…",
  "instance": "/v1/permits",
  "request_id": "req_1f07fb45782b445e9f6312ba23921234"
}

Every PermitCore error is RFC 9457 application/problem+json. Branch on type (a stable URI), not on title or detail (human-readable, may change).

When it occurs

The credential could not be authenticated. In most cases the API returns invalid-credentials for a bad key; this generic variant is emitted on the fallback path.

How to fix

Confirm you are sending the full plaintext key, or rotate it at permitcore.io/account/api-keys. Not retryable unchanged. Not retryable — fix the request before resubmitting; retrying unchanged returns the same error. See the full error catalog for the response shape and retry matrix. Every response carries an x-request-id header — include it in any support request.

Invalid credentials Missing scope

Introduction

Concepts

API Reference

Reference

Invalid or revoked API key

When it occurs

How to fix

​When it occurs

​How to fix

When it occurs

How to fix