# Attempting to get Private Apps working. Error: Authentication credentials not found

**URL:** <https://community.hubspot.com/t/attempting-to-get-private-apps-working-error-authentication-credentials-not-found/66737>\
**Category:** APIs & Integrations\
**Created:** [October 7, 2022, 6:52pm UTC](https://community.hubspot.com/t/attempting-to-get-private-apps-working-error-authentication-credentials-not-found/66737 "2022-10-07T18:52:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![AdamJacobson](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/adamjacobson/32/196576_2.png) [@AdamJacobson](https://community.hubspot.com/u/AdamJacobson)\
**Post date:** [October 7, 2022, 6:52pm UTC](https://community.hubspot.com/t/attempting-to-get-private-apps-working-error-authentication-credentials-not-found/66737/1 "2022-10-07T18:52:49Z")

</div>

I’ve been trying to follow the video shown here [https://www.youtube.com/watch?v=F3Qd9Hp4giM](https://www.youtube.com/watch?v=F3Qd9Hp4giM) in order to get Private Apps working. I am using Postman just like the video. Everything else looks the same to me.

Error message received is

**“message”: “Authentication credentials not found. This API supports both API Key and OAuth 2.0 authentication and you can find more details at [Accounts Dashboard | HubSpot](https://developers.hubspot.com/docs/methods/auth/oauth-overview)”,**

The URL being generated is here (minus the stars which is where my Private App token is)

**[https://api.hubspot.com/crm/v3/objects/contacts?Authorization=bearer](https://api.hubspot.com/crm/v3/objects/contacts?Authorization=bearer) \*\*\*-\*\*\*-\*\*\*\*\*\*-\*\*\*\*-\*\*\*\*-\*\*\*\*\*-\*\*\*\*\*\*\***

The exact same URL works fine if I instead use the **hapikey** header with our existing API key.

What am I doing wrong?

---

<div class="post-metadata">

**Author:** ![Teun](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/teun/32/28739_2.png) [@Teun](https://community.hubspot.com/u/Teun)\
**Post date:** [October 10, 2022, 7:01am UTC](https://community.hubspot.com/t/attempting-to-get-private-apps-working-error-authentication-credentials-not-found/66737/2 "2022-10-10T07:01:10Z")

</div>

Hi @AdamJacobson ,

You can not pass the Authorization header in the URL, but it needs to be set through Postman.

 ![Schermafbeelding 2022-10-10 om 09.00.42.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/9/0/90b3062e9a9c2f1a04c315f97fbae1275b042ed9.png)

---

<div class="post-metadata">

**Author:** ![AdamJacobson](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/adamjacobson/32/196576_2.png) [@AdamJacobson](https://community.hubspot.com/u/AdamJacobson)\
**Post date:** [October 11, 2022, 4:15pm UTC](https://community.hubspot.com/t/attempting-to-get-private-apps-working-error-authentication-credentials-not-found/66737/3 "2022-10-11T16:15:24Z")

</div>

Okay. That worked. Thank you.

I am still confused as to why the video shows this being done as a header and it works fine but not for me…