unauthenticated

​

What triggers it

• No Authorization header.
• Header doesn’t start with Bearer .
• Key is unknown (typo, revoked, deleted org).
• Key prefix doesn’t match the environment (e.g., lmp_test_… against the production base URL).

​

Response shape

{
  "error": {
    "code": "unauthenticated",
    "message": "Missing or invalid Authorization header.",
    "remediation": "Send 'Authorization: Bearer lmp_live_…' (or lmp_test_…) on every request.",
    "docUrl": "https://docs.letmepost.dev/errors/unauthenticated",
    "requestId": "req_..."
  }
}

​

Remediation

1. Mint or rotate a key in the dashboard’s API keys page.
2. Confirm the prefix matches your environment.
3. Confirm the key wasn’t revoked — revocation is immediate.

​

Related

• Authentication — full key shape + scoping rules.
• unauthorized — authenticated but not allowed.
• platform_auth_failed — upstream platform token issue.