# `auth.invalid_key` — API key not recognised

**HTTP status:** 401  
**Retryable:** no — change the request or the flow first

## When it happens

The key is malformed, was mistyped, or never existed.

## What to do

Copy the key again from the panel. A key is shown only once when it is created — if it is lost, create a new one and revoke the old one.

## Example response

```json
{
  "type": "https://quickota.com/developers/errors/auth.invalid_key",
  "title": "API key not recognised",
  "status": 401,
  "code": "auth.invalid_key",
  "detail": "The key is malformed, was mistyped, or never existed.",
  "suggestion": "Copy the key again from the panel. A key is shown only once when it is created \u2014 if it is lost, create a new one and revoke the old one.",
  "retryable": false,
  "requestId": "req_7f3a2c9e41d0b8a6c5e21f90"
}
```

See [Errors](https://quickota.com/developers/guides/errors) for how to handle errors in general.