Errors / malformed_api_key

Malformed API key

HTTP 401authenticationmalformed_api_key

The value is not shaped like a Textmast key at all.

What to do

A key is tm_, then live or test, then a prefix, then a secret — four parts separated by underscores. This usually means a truncated paste or a session token sent where a key belongs. Note that it is checked before the key is looked up, so this answer says nothing about whether such a key exists.

What it looks like

{
  "error": {
    "type": "authentication",
    "code": "malformed_api_key",
    "message": "…",
    "doc_url": "https://docs.textmast.com/errors/malformed_api_key",
    "request_id": "req_01j8xk2p7n4qc3m9v0wz5bt6ay"
  }
}

Quote the request_id if you get in touch. It is on every response, including this one, and it turns a support email into a single log query rather than an archaeology exercise.

Related