Why is my API call getting a 401?
Download MarkdownCheck the exact operation's authentication and required scope. A missing, malformed, expired, revoked or insufficiently scoped credential can be refused without revealing which check failed. A 401 alone does not prove the token is
Check the exact operation's authentication and required scope. A missing, malformed, expired, revoked or insufficiently scoped credential can be refused without revealing which check failed. A 401 alone does not prove the token is simply mistyped.
Send the actual credential through the documented Authorization header, never a URL. Confirm you copied the credential rather than the Client ID or an example value.
An MCP connection also needs a host that can send the supported credential header. Tool discovery and execution permissions are separate. See Connect an AI Agent and the operation-specific API Reference.
Related Articles
- What can the CloseMagnet API do?It reads almost everything in your account, and what it writes is deliberately narrow. Its endpoints span 17 domains and the large majority are read-only. The ones that write do one of these things:
- How do I create an API credential?Only the account owner can mint one, and it happens at Settings -> API.
- What is the difference between my account API token and a scoped credential?Your account API token was minted automatically when the account was created. It sits pinned as the first row in Settings -> API with the type "Automatic", carries a fixed set of scopes, can be revealed again at any time, and can
- How do I rotate or revoke a credential?It depends which kind you have, and only the account owner can do either one.