When I make this call from within Postman it works fine, but when I try to call it from my website I get the error at the bottom. Please advise why this would happen https://api.hubapi.com/crm/v3/objects/contacts?hapikey= ?&limit=3&archived=false&properties=id,firstname,lastname,email 401{“status”:“error”,“message”:“Authentication credentials not found. This API supports both API Key and OAuth 2.0 authentication and you can find more details at https://developers.hubspot.com/docs/methods/auth/oauth-overview",“correlationId”:“42b2380c-ebd3-422c-b41a-5c5fe1d36840”,“category”:"INVALID_AUTHENTICATION”} HubSpot Account 8835722

I did. You can close this thread. I’m giving up on the API Key auths -- was able to get the oAuth working. Thanks!

Hi @VEspo When you say from my website? Are you using this in the front end js? If so, I would highly recommend not doing that as you will expose the API key. If not, can you give us some more details about what you are doing? @malcolm1 might be able to help once we have some more info :grinning_face:

I’m the programmer for a customer who has a paid HubSPot account with you. They have the bulk of their data in an SQL database which connects to the website and their backend admin. They want me to keep their database and their HubSpot data in sync with your APIs – so I am trying to call your contacts API via a winhttp call from their website. It’s in ASP – and they have SSL on the site .. the key is not exposed. We do this with GHIN/USGA, MemberPlanet, GolfGenius, and many others. The main goal is to add/update/search and create contacts, as well as pulling changes and getting a full list of the contact IDs to match up to their SQL records. Nothing else at this time.

If it works in Postman then you have the right targets and the right data structures. Look at the way in which Postman is handling authentication and copy that into your winhttp call. By the way, do you know about Postman’s “copy as…” command? It generates the same call that you are making via Postman in dozens of different languages. off-topic: I sometimes which I could route the calls through my postman collection. It would be my secret power-tool.

Thanks Malcom -- Authoorization Type = No Auth. The only thing I see different in the Postman code is that it is sending thru a cookie in the request header - I’m not finding anything about that in the documentation or endpoints.

Actually - the cookie doesn’t do anything. I deleted it in Postman and it still ran. My code (outside of Postman) still gets a 401 Unauthorized response when I copy and paste from their code

Aren’t you passing a Bearer token?

No - was using the API Key method -- same inside of Postman

Are u sure the API is send with the request from your website?

It’s working in Postman. Have you tried copying the working code using Postman’s “code” converter to see what you get?

INVALID_AUTHENTICATION using API Key method

Develop, Build & Integrate APIs & Integrations

VEspo March 30, 2021, 5:33pm 10

Yes -- I’ve tried sending it from both my localhost and website -- get the same error record for both

Topic		Replies	Views
INVALID_AUTHENTICATION APIs & Integrations oauth	3	6975	September 8, 2021
This hapikey API doesn't exist APIs & Integrations webhooks	6	12944	August 11, 2021
Cannot do searches with api key but can with OAuth APIs & Integrations	1	1528	October 19, 2022
Help: Getting a 401 saying "Authentication credentials not found" for only one customer! APIs & Integrations oauth , sdk , developer-tools	5	11378	February 19, 2025
Why it says hapikey does not exist when trying to make the API call request ? APIs & Integrations contacts , developer-tools , php	3	4187	August 23, 2022

INVALID_AUTHENTICATION using API Key method

Related topics