When it fires
An endpoint that requires authentication received a request with noX-API-Key header.
Why it happens
- The request was sent without the header (most common on a first integration).
- A reverse proxy or HTTP client stripped the header.
- The wrong base URL. The documented endpoints live under
/v1/*.
How to fix
- Send the key on every authenticated request. Keys are issued from the Kash web app (Settings → API Keys).
- The full key is shown once, at issuance. If you have lost it, revoke it and issue a new one.
Related codes
API_KEY_MALFORMED— header present but not in thekash_(live|test)_*shapeAPI_KEY_INVALID— header well formed but unknown