# Common errors

Specific error messages and how to fix them.

## Provided token is invalid

The key is missing or wrong. Check that the header is exactly `Authorization: Bearer atsec_...` and that you copied the whole key.

## This API token has expired, or has been disabled

Expired keys stop working, and keys unused for 90 days are disabled. Create a new key, or rotate this one on the Tokens page.

## The owner of this API token is not active

The person who created the key has been deactivated. Create a new key under an active user.

## Endpoint is not valid for the user provided token

The key doesn't have the permission for this endpoint. The API reference page shows which one to add.

## Your request failed on validation

A field is wrong or missing. `errorDetails` says which one.

## Endpoint doesn't exist, or the HTTP method is incorrect

The path is wrong. This returns `400`, not `404`. Compare the URL with the API reference.

## Column does not exist

A name in `fields`, `filters` or `orderBy` is wrong, or you sorted by a field that isn't in `fields`. This one returns `500`.

## Client with email or phone already exists

Each client must have a unique email and phone in your organization. To get the existing client back instead of an error, send `throwErrorOnClientExists: false`.

## Plan limit exceeded

You've reached a limit of your plan, and the API returns `402`. Upgrade your plan or remove some records.
