unauthorized

What happened

No valid API key.

Why

The request carries no API key, or one that is unknown, revoked or of the wrong kind (a publishable vl_pub_ key cannot call these routes). This refusal comes from the authentication layer, before any route runs: its body is { error, message }.

How to fix it

Send Authorization: Bearer <key> with a secret key from the dashboard (Developers → API keys). Test keys start with vl_test_.

Example response

{
  "error": "unauthorized",
  "message": "No valid API key."
}

See Errors, retries and idempotency for how to handle errors in general.