Invalid API key

What it means

The API key you sent is missing, malformed, revoked, or unknown to our system.

Common causes

• •Header is absent — neither `X-API-Key` nor `Authorization: Bearer …` was sent.
• •Key doesn't start with the `rc360_` prefix.
• •Key was revoked at /account/api-keys.
• •Key was rotated and the consumer is still using the old value.

How to fix

1. 1.Mint a fresh key at https://regcheck360.com/account/api-keys (the secret is shown ONCE).
2. 2.Send it as `Authorization: Bearer rc360_…` or `X-API-Key: rc360_…`.
3. 3.Confirm with `GET /api/v1/whoami` — a 200 means the key is valid.

Example

curl -s https://regcheck360.com/api/v1/whoami \
  -H "Authorization: Bearer rc360_…"