Skip to main content
The request didn’t carry a valid letmepost API key. This is about your key — not the upstream platform token. For platform token issues see platform_auth_failed.

What triggers it

  • No Authorization header.
  • Header doesn’t start with Bearer .
  • Key is unknown (typo, revoked, deleted org).
  • Token doesn’t start with lmp_live_ or lmp_test_ — anything else isn’t recognised as a key at all.
The prefix is not an environment check. lmp_live_ and lmp_test_ take the same code path against the same base URL, so a test key will never be rejected for being “the wrong environment” — it just publishes. See authentication.

Response shape

unauthenticated.json

Remediation

  1. Mint or rotate a key in the dashboard’s API keys page.
  2. Confirm you’re sending the whole secret, prefix included.
  3. Confirm the key wasn’t revoked — revocation is immediate.