401 - Unauthorized

Your API key didn't authenticate. Here's how to fix it.

json

{
  "error": {
    "code":    "authentication_error",
    "message": "Invalid or missing API key"
  }
}

Four common causes

Missing `Bearer` prefix. The header must be Authorization: Bearer hw_live_..., not just hw_live_....
Key was revoked. Check Dashboard → Keys. Revoked keys show a red badge. Generate a new one.
Typo or truncation. Copy the key fresh from your secret manager. Keys are hw_live_ + 32 hex characters.
Wrong environment variable. HIWAY_API_KEY vs HIWAY_KEY - make sure your app reads the right one.

Keys never rotate on their own

HiWay does not expire or rotate keys automatically. If your key stopped working, either it was revoked (by you or a team member) or the value being sent is wrong. Never the server's fault.