Unauthorized

What it means

No valid credentials were found for this request.

This usually points at your integration's setup rather than anything the end user did. Show the end user a generic message like "Something went wrong on our end.", and log detail for your own debugging.

How to fix it

1. 1.

   No Authorization header was sent, and there is no logged-in session.

   Send Authorization: Bearer {token} on every request, or call this from a logged-in browser session.

2. 2.

   Session auth resolved to an organization that doesn't exist or isn't accessible.

   Confirm the X-Organization-Slug (or -Id) value matches an org the current user actually belongs to.

Where this happens

Enforced by shared authentication middleware before any endpoint-specific code runs. Every /api/v0/ request that requires auth can return this.